Aug. 7, 2022, 4:38 p.m. | John P. Gormally, SR

Security Boulevard securityboulevard.com


Security Risk by Accepting Policy Exceptions

When an exception to the rule becomes a security breach.

I was profoundly shocked after reading the cybersecurity act of 2021. The action called for a 120-day study by the CISA on the various attack vectors impacting the K-12 school districts. Additional mandates include recommendations to deal with malware and ransomware. This act and similar educational security mandates are seen to lack the requirement for mandatory implementation and accountability.


An exception to any rule …

cybersecurity hacking k-12 education mitre attack policy risk security security risk

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Information Security Engineers

@ D. E. Shaw Research | New York City

Security Solution Architect

@ Civica | London, England, United Kingdom

Information Security Officer (80-100%)

@ SIX Group | Zurich, CH

Cloud Information Systems Security Engineer

@ Analytic Solutions Group | Chantilly, Virginia, United States

SRE Engineer & Security Software Administrator

@ Talan | Mexico City, Spain