I know of companies that have been received the ISO 27001 certificate and
the next day been hacked or their security compromised. For some reason
there is the belief that if you are certified than you are more secure. At
least in India this is what senior management think. I believe that over
time this will give certifications a bad name. How do we delink the fact
that just because you are certified does not make you more secure. There is
and can be no magic bullet for e-security that can companies can bite. Any
responses.
I know of companies that have been received the ISO 27001 certificate and
the next day been hacked or their security compromised. For some reason
there is the belief that if you are certified than you are more secure. At
least in India this is what senior management think. I believe that over
time this will give certifications a bad name. How do we delink the fact
that just because you are certified does not make you more secure. There is
and can be no magic bullet for e-security that can companies can bite. Any
responses.
Vijay Mukhi
CEO
Counter Espionage Officer
[ reply ]