[Info-vax] report of the last "rendez-vous autour de VMS" (2-FEB-2024)

[Simon Clubley]

On 2024-04-18, motk <yep at yep.yep> wrote:
> On 18/4/24 22:23, Simon Clubley wrote:
>
>> I wonder what has driven this sudden change and if this will be more
>> permanent than it was the last time around ?
>
> It's odd it's not there. Corporate insurance for 'cyber' issues, 
> absolutely vital in any banking or finance environment. You need to be 
> able to demonstrate you have  clear standards for managing CVE issues 
> that Qualys or Tenable throw at you, or else.

Tell me about it. :-(

When I dealt with VSI over my DCL findings, the engineers were great but
the management were useless (apart from the excellent guy who they brought
in to advise them and who quit ~3 months later). You would have thought
that VSI management would have learnt lessons in the aftermath of that.

My guess is that enough customers have finally forced VSI management to
comply with the expected industry standards.

Simon.

-- 
Simon Clubley, clubley at remove_me.eisner.decus.org-Earth.UFP
Walking destinations on a map are further away than they appear.