Cyber-security gets more complicated by the day. Companies face evolving technology, a regulatory hammer, and the complexity of breach notification rules that vary state-by-state.
There are also tough ethical decisions to consider. When does the transparency of breach disclosure become an invitation and blueprint for other hackers? Should you pay the hackers behind a ransomware attack or adopt a “we don’t negotiate with terrorists” philosophy? Where, and how, does the line blur between “white hat” and “black hat” hackers? Are so-called “bug bounties” a viable security initiative, or a slippery slope?
