A Standard is not enough
Think of real world deployments:
⇒ Implementations flaws
⇒ Configuration mistakes
⇒ Specification misinterpretation
⇒ Incomplete trust contracts
⇒ Lack of knowledge
⇒ Carelessness …
No Responses to “A Standard is not enough”
Computer Week Security
- What are Common Criteria (CC) for Information Technology Security Evaluation?
- Government agencies urged to use encrypted messaging after Chinese Salt Typhoon hack
- Are you on the naughty or nice list for responsible AI adoption?
- Shared digital gateway was source of three NHS ransomware attacks
- NCA takes out network that laundered ransomware payments