Business-ease Bug

I always encountered one particular scenario that lead to compromises and that is ‘business ease’. In the name of business ease, organizations does a lot of such minute mistakes that result in major hacks. Minutes mistakes such as not ensuring that third party vendors are using adequate security controls, validating the security of 3^rd party software before installing those in the environment and especially the since-it-was-so-it-is approach. It is one approach that business people always say that since it is being used this way, so let it be this way. But with the change in the environment, these processes must also be optimized. One example is providing some 3^rd party software to Cashier in retail stores just because it was being previously not because it is crucial for having it in cashiers machine. Not looking for simple alternatives such as using a non-critical machine for such 3^rd party tool. Organization create a lot of such exposure points for cyber criminals to enter into their environment.

It is something that organizations must understand that by avoiding such a small step, they can save a lot. There are always simpler solutions for such business ease issues that organization don’t like to consider.