Unpatched and insecure systems connected to the internet are a form of internet pollution. Eventually there will be catastrophic incidents caused by this pollution. Once this happens, the public will take notice and demand laws fining those who consistently refuse to clean up their acts. Until this happens though, most organizations will not assign a high priority to securing their own systems, because most of them lack a financial incentive to do so.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/178/21274#21274