Post #2725063
2026-04-10 12:45 UTC
Now if I tell you, as a cybersecurity professional, that PII, PHI, and other similar data should be treated as a liability and not an asset will you simply believe me? Do I need to explain it to you for you to accept that as true? Do you need to prove it to yourself first?
If you were more resistant to taking my word for the second item than the first, why? Is it because I lack business credentials, and this is a business decision? Is it because collecting PII is your business model?
Replies (1)
-
@berniework@infosec.exchange 2026-04-10 12:45
All I'm asking is that you accept the expertise of those who may challenge your views and beliefs, so long as their credentials are appropriate. When in doubt consult other experts for their input. Otherwise you'll need to become an expert in, well, everything, and that's a pretty tall order as far as I can tell.