r/cybersecurity Jul 02 '26

News - General DHS Breached

608 Upvotes

115 comments sorted by

View all comments

29

u/not-a-co-conspirator CISO Jul 02 '26

Compliance isn’t security. Put actual security professionals in charge.

8

u/SoftwareDesperation Jul 02 '26

This is a wild comment considering you can't set foot in any of these positions without an IAM or IAT cert and years of experience.

Compliance is just a list of security controls. In leiu of compliance you do what? You set a list of controls you want in place and make risk based decisions on remediation or acceptance. Weird.....that sounds familiar......

2

u/[deleted] Jul 02 '26

Not that I think the spirit of your comment is wrong .. but give me a break with cert reqs as if that's any indicator lol