Regulation Frustration

The concept of "malicious compliance" refers to IT groups that comply, to the letter, with one or more standards while knowing that limiting their efforts in this way may have a negative impact on the business. Of course, few security professionals are setting out to sabotage their employers. But being tasked with multiple regulations, many of them with nebulous guidelines, brings significant stress--especially when the cost of failure ranges from bad press to fines to your CEO doing the perp walk on national television.

To see whether you're simply doing the minimum required to fill in various compliance checklists and hoping for the best, take our quiz. If you answer "yes" to any of these questions, it's time for a risk assessment.

Return to the main story:
Compliance Is Just The Beginning