Fun Friday #50: Security Compliance vs Functional Security
Happy Friday Everyone! Yep, I’ve used the words “fun”, “security” and “compliance” in the same sentence, and I’m not trying to sell you anything! In line with cybersecurity awareness month, I want to talk about functional security vs security ‘compliance’. Simply put, security compliance is about achieving the correct tickboxes on a form, to say you’ve done something, rather than functional security, which is about strengthening a security weakness. Like a few of these, this is inspired by some tech battle scars… Here’s my example: The client wants to comply with a security standard. The timescale: Yesterday. I’m sure by now, most of us have had a client like this, they want the piece of security conformance paperwork for their bosses to be happy, but they don’t want to put in any work for this. I was asked to consult for a client requiring a firewall and some professional services to be utilised, easy enough! But oh boy, was it an interesting scenario when I got there. The client want
