Wednesday 29 April 2009

Compliance, compliance..compliance

I had a discussion with an analyst yesterday about virtual security. His conclusion was that it was "early days" and few people actually talked about the security risks in the virtual world. When I asked him what security issues that where on managers minds today he replied..compliance.
My reflection is that the compliance discussion is the first time that security specialist has been able to build a bridge to managers where there seem to be an understanding from both parties. Maybe this is the even the first time security vendors have figured out a way of marketing security products in such a way that management can understand. Compliance is often about common sense but sense in order to be common has to be communicated in the right way.
Now I just hope that we vendors will not destroy the discussion by marketing products with slogans such as "by me and we will solve all your compliance issues...all the time..." That will erode the message fast. Vendors should learn from the experience from the discussion about SOX.

No comments: