bkbettis (8/11/2014)

---

Business is all about money. If the cost of added security to make us all feel better outweighs the feeling we get from the quarterly earnings statement and, as the article implies, few people really do care, then we are obligated as servants of the business we service as IT professionals to honor their choice and not worry too much about security. Having said that, if you are the IT director and your contract has you personally responsible for security, which sometimes happens, then your contract is at odds with the larger business goals and you have a serious problem. I don't have an answer for that scenario, but I do know if the CEO doesn't value security, then no one else will, either.