Martin Boller 🇬🇱 🇺🇦 :tux: :freebsd: :windows: :mastodon:<p>Compliance-sizing: the act of replacing highly skilled and educated cyber security professionals with auditors.</p><p>…Or just overwhelming said professionals with sheer amounts of useless “controls” developed by people with no real understanding of how Threat Actors operate.</p><p><a href="https://infosec.exchange/tags/ComplianceSizing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ComplianceSizing</span></a> <a href="https://infosec.exchange/tags/Compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Compliance</span></a> <a href="https://infosec.exchange/tags/ISO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ISO</span></a> <a href="https://infosec.exchange/tags/IEC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>IEC</span></a> <a href="https://infosec.exchange/tags/ThreatActors" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ThreatActors</span></a> <a href="https://infosec.exchange/tags/TAs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TAs</span></a></p>