by Jesper Kråkhede, Sweden
Posted in Business, Security Architecture on Feb 14th, 2021
After two months of writing about compliance I have had a few questions from managers along the lines of: Fine, but what should it cost? There is no single answer, but here is how I suggest you think about it. Split the cost in three: the work to implement the controls, the work to prove […]
Posted in Security Architecture, Technology on Feb 5th, 2021
There is one moment every security architect fears. You arrive at a new customer, you ask about their requirements and someone proudly opens a spreadsheet. It has every regulation and standard the company needs to follow mapped against each other. ISO 27001, NIST, GDPR, the industry regulator, a couple of customer contracts. Hundreds of rows, […]