Things will only meaningfully change when insurance companies stop paying out when reasonable steps weren't taken by companies to protect themselves.

▲

rcxdude 29 minutes ago | parent | next [-]

Insurance does actually tend to put cybersecurity requirements on to businesses they insure, the problem is that it's pretty hard to write cybersecurity requirements that actually result in secure IT systems as opposed to just a bunch of compliance work.

▲

esikich 6 hours ago | parent | prev [-]

As someone who has worked with small and medium sized businesses, reasonable is extremely variable. I'm dealing with a small business right now that can't upgrade their perfectly good computers because of TPM issues. On one hand, I kind of get the reasoning behind it, but how can you hold a business of 10 people accountable for not knowing how to buy a computer that will be reasonably future proof? Every business needs IT on hand? I think that's asking too much. On the otherhand, you should know the tools you need to run your business. There's no fine line.

▲

ryandrake 5 hours ago | parent [-]

I think if you can afford computers for your business but you can't afford to keep them secure, then you can't afford computers for your business.

▲

esikich 5 hours ago | parent [-]

What about plumbing and electrical? Do you need to employ those as well?

	▲	mmyrte 2 hours ago \| parent [-]
		No, but you do need to keep them secure. The argument goes towards computers as appliances, which I wholly support.