Incident Response Stories - Bill Swearingen - PSW #793
Security Weekly Podcast Network (Audio)
00:00
The Importance of Intentions in Security
I don't see a way to quantify the severity of a security vulnerability to then enforce legislation. I'm not saying necessarily it's, that's a bad thing. Because I think we all have the best intentions and the intentions being if there is a really bad vulnerability, we want to see. The problem with that is like in history, they come up with an internal policy that says we have to fix every vulnerability within three days. So what they'll do is they'll ask the people generating the scores if that could be a 7.9 because we don't want to have to fix that vulnerability.
Transcript
Play full episode
