The spreadsheet of doom
Posted in Security Architecture, Technology on Feb 5th, 2021
There is one moment every security architect fears. You arrive at a new customer, you ask about their requirements and someone proudly opens a spreadsheet. It has every regulation and standard the company needs to follow mapped against each other. ISO 27001, NIST, GDPR, the industry regulator, a couple of customer contracts. Hundreds of rows, […]