Regarding the insurance comments, I have to disagree with you. While at first the insurance proposal may look reactive, in reality they will have a proactive effect. All purchasers of insurance want to lower their premium. To do so insurance companies will develop a set of best practices and standards that these organizations will need to meet. Implementation of these practices by insured organizations will have an overall beneficial and proactive effect on computer security. In effect, computer security insurance uses the market place to mandate better practices.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/94/14160#14160