Full Disclosure mailing list archives
RE: Learn from history?
From: "Ng, Kenneth (US)" <kenng () kpmg com>
Date: Mon, 10 May 2004 08:39:36 -0400
Your missing an important element: what are the odds of the event happening? Lots of places refuse to act until there is an actual worm that is trashing businesses show up in their trade publication (in other words, full-disclosure, and slashdot.org don't count). Trouble is, with the speed of today's worms, by the time it shows up on cnn.com, its too late. -----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com]On Behalf Of Alerta Redsegura Sent: Thursday, May 06, 2004 11:08 AM To: Full-Disclosure Subject: RE: [Full-disclosure] Learn from history?
My only point is, SMB businesses are not prepared to pay for advanced security, which you say I should provide, and to whick I totally agree. Maybe my boss does not have the right business plan and marketing to 'sell' security. Probably.
The first thing to determine with the company management is: What happens to the company if their network is down 1h? 2h? One day? One week? How much money does that represent? If data is lost, how much does it cost to re-build it (resources, time spent, etc.)? If you clearly assess the risks and come up with a solution showing an adequate cost-benefit ratio and you compare it to the possible losses, chances are that management will approve your proposal, regardless of the company size (from SMB to Fortune-100). IƱigo Koch Red Segura _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html ***************************************************************************** The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. When addressed to our clients any opinions or advice contained in this email are subject to the terms and conditions expressed in the governing KPMG client engagement letter. ***************************************************************************** _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Learn from history?, (continued)
- Re: Learn from history? Ondrej Krajicek (May 06)
- RE: Learn from history? Serge van Ginderachter (svgn) (May 06)
- RE: Learn from history? Alerta Redsegura (May 06)
- RE: Learn from history? Ferris, Robin (May 06)
- RE: Learn from history? Alerta Redsegura (May 06)
- RE: Learn from history? Steve Bremer (May 06)
- RE: Learn from history? Serge van Ginderachter (svgn) (May 06)
- RE: Learn from history? full-disclosure (May 06)
- RE: Learn from history? Serge van Ginderachter (svgn) (May 06)
- RE: Learn from history? Serge van Ginderachter (svgn) (May 06)
- RE: Learn from history? Ng, Kenneth (US) (May 10)
- RE: Learn from history? Alerta Redsegura (May 10)
- RE: Learn from history? Michal Zalewski (May 10)
- RE: Learn from history? Alerta Redsegura (May 10)
- RE: Learn from history? Gwendolynn ferch Elydyr (May 10)
- Re: Learn from history? Calum (May 11)
- RE: Learn from history? Ron DuFresne (May 11)
- RE: Learn from history? Michal Zalewski (May 10)
- RE: Learn from history? Alerta Redsegura (May 10)
- Re: Learn from history? James Riden (May 10)
- RE: Learn from history? Steffen Kluge (May 11)