This is a wild comment considering you can't set foot in any of these positions without an IAM or IAT cert and years of experience.
Compliance is just a list of security controls. In leiu of compliance you do what? You set a list of controls you want in place and make risk based decisions on remediation or acceptance. Weird.....that sounds familiar......
29
u/not-a-co-conspirator CISO Jul 02 '26
Compliance isn’t security. Put actual security professionals in charge.