The future of information security is to provide data to insurance companies.

Most will work for various companies that assess the defenses of companies and that data will be used to determine the premiums that they pay for coverage.

It’s not sexy, but it’s inevitable.

[ Mar 18, 2008 ]