Conversation

Notices

1. Embed this notice
   Dave 🐶 (cyberoutsider@infosec.exchange)'s status on Tuesday, 16-Sep-2025 06:02:18 JST Dave 🐶

   • Kevin Beaumont

   @GossiTheDog You got GDPR because companies didn't really have much incentive to care about mismanaging personal data/severely impacting the lives of their customers.

   Aside from NIS/new CS+R bill, one assumes it was felt there wasn't really the need to legislate the operations part/"perhaps don't let your company burn down" potential scenarios as you'd usually think a CEO is primarily focused on exactly that anyway... turns out we were wrong. Getting to the next end-of-quarter bonus seems to be more important than checking whether the company is still there or not.

   • Embed this notice
     Dave 🐶 (cyberoutsider@infosec.exchange)'s status on Tuesday, 16-Sep-2025 06:11:24 JST Dave 🐶

     • Kevin Beaumont

     @GossiTheDog I can't honestly believe that *anyone* brings in TCS (or similar other MSPs) with the long-term intent of personally working with them.

   • Embed this notice
     penguin42 (penguin42@mastodon.org.uk)'s status on Tuesday, 16-Sep-2025 06:11:39 JST penguin42

     • Kevin Beaumont

     @GossiTheDog The JLR one is tricky because their parent company is Tata Motors; so I'm assuming that using TCS is 'keeping it in the family' so feels more logical to them than to others. But I'm also confused, there's speculation that JLR lost it due to salesforce, so then is it entirely unrelated to TCS/outsourcing at all?

   • Embed this notice
     Dave 🐶 (cyberoutsider@infosec.exchange)'s status on Tuesday, 16-Sep-2025 06:24:10 JST Dave 🐶

     • Kevin Beaumont

     @GossiTheDog The bit that really confuses me from a management-perspective is how you'll usually go from a small, highly skilled and experienced in-house team (say 3 or 4 people)... to TCS's/an-other-MSP's teams of 28 people, who all turn up on the same calls, say nothing and hide behind Service Desk ticket hot potato...

     And after all that, management still thinks they're getting a good deal out of this?

   • Embed this notice
     Just_Patch_It (just_patch_it@cyberplace.social)'s status on Tuesday, 16-Sep-2025 06:26:51 JST Just_Patch_It

     • Kevin Beaumont

     @GossiTheDog This. “it isn’t so much a sign as the canary in the coalmine has died, but that the coalmine is also about to collapse on people.”

   • Embed this notice
     Alex (alex02@cyberplace.social)'s status on Tuesday, 16-Sep-2025 07:42:40 JST Alex

     • Kevin Beaumont

     @GossiTheDog I have always wondered if the reason companies and businesses pay ransoms is because they can write it off on their taxes? There was a case of a guy who got kidnapped and paid his ransom then went to court to argue that it was a business expense so he could write it off his taxes.