Asset Attack Vectors: Building Effective Vulnerability Management Strategies to Protect Organizations

© Morey J. Haber, Brad Hibbert 2018

Morey J. Haber and Brad HibbertAsset Attack Vectorshttps://doi.org/10.1007/978-1-4842-3627-7_19

19. Regulatory Compliance

Morey J. Haber¹  and Brad Hibbert²

(1)

Heathrow, Florida, USA

(2)

Carp, Ontario, Canada

 

A threat actor does not care about the law, compliance, regulations, and security best practices. In fact, they are hopeful that your organization is lax on many of these specifications and frameworks in order to leverage them for malicious intent. While regulatory compliance is designed to provide legally binding guidelines for industries and governments, they do not provide the necessary means to stay secure. Compliance does not equal security. They are best practices that point toward good cyber security ...