Darkreading: compliance

[michaelslists at gmail.com (Michael Silk)]

On 3/13/07, Gary McGraw <gem at cigital.com> wrote:
> hi sc-l,
>
> this month's darkreading column is about compliance.  my own belief is
> that compliance has really helped move software security forward.  in
> particular, sox and pci have been a boon:
>
> http://www.darkreading.com/document.asp?doc_id=119163
>
> what do you think?  have compliance efforts you know about helped to
> forward software security?



no. my feeling is that it focuses management on unimportant things like
meeting checkpoints rather then actually doing useful things.


gem
> company www.cigital.com
> podcast www.cigital.com/silverbullet
> blog www.cigital.com/justiceleague
> book www.swsec.com
>
>
>
>
> ----------------------------------------------------------------------------
> This electronic message transmission contains information that may be
> confidential or privileged.  The information contained herein is intended
> solely for the recipient and use by any other party is not authorized.  If
> you are not the intended recipient (or otherwise authorized to receive
> this
> message by the intended recipient), any disclosure, copying, distribution
> or
> use of the contents of the information is prohibited.  If you have
> received
> this electronic message transmission in error, please contact the sender
> by
> reply email and delete all copies of this message.  Cigital, Inc. accepts
> no
> responsibility for any loss or damage resulting directly or indirectly
> from
> the use of this email or its contents.
> Thank You.
>
> ----------------------------------------------------------------------------
>
> _______________________________________________
> Secure Coding mailing list (SC-L) SC-L at securecoding.org
> List information, subscriptions, etc -
> http://krvw.com/mailman/listinfo/sc-l
> List charter available at - http://www.securecoding.org/list/charter.php
> SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
> as a free, non-commercial service to the software security community.
> _______________________________________________



-- 
mike
00110001 <3 00110111
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://krvw.com/pipermail/sc-l/attachments/20070313/fcbd76fc/attachment.html