Yes, "cyber insurance" is a common driver behind these awful security and system...

hypeatei 86 days ago | parent | context | favorite | on: Let's blame the dev who pressed "Deploy"

Yes, "cyber insurance" is a common driver behind these awful security and system decisions. For example, my company requires password changes every 90-days even though NIST recommends against that. But hey, we're meeting insurance requirements!