Does cost play a role? Provide rationale to support your answer.

Discussion 2

.

Respond to these colleagues (BELOW): (Half a page each and please, provide each references)

Discussion Topic

Having used the tools related to this assignment, explain why companies still fail at implementing security controls. Does cost play a role? Provide rationale to support your answer.

Post from colleague 1

Good morning Professor and classmates,

I feel personally like many companies still don’t implement controls fully, or at all for a number of reasons. The first of which can be the cost to not only implement the security measures, but also maintain the systems, and hire the staff either full time or from an external contractor to update, maintain, and have the knowledge of the systems to do all of the above. The other idea is that once the systems are in place they are fine, and no other actions need to be taken to keep all the system secure, that can’t be further from the truth but many do not understand that.

One way to curb this sort of thinking is to educate executives, or managers who may not fully understand just what cybersecurity is and what it entails. And also to discuss options for payments with them, while it can be expensive so can losing your business due to a cyber attack. Many companies are willing to work with prospective companies and can often come up with payment plans that fit both budgets.

Lohrmann, D. (2019, February 23). In Why Many Organizations Still Don’t Understand Security. Retrieved from https://www.govtech.com/blogs/lohrmann-on-cybersecurity/why-many-organizations-still-dont-get-security.html

Post from colleague 2

Costs play a major role in the implementation of cybersecurity. Small businesses struggle more with implementing cybersecurity because their budgets are small. Small businesses require the same security controls that large and medium sized businesses require to secure their networks. This means that resources must be stretched as much as possible to be able to afford security. This also means that then number of staff and the skill level of that staff are subject to what the budget can support to hire. Implementing technology is a tricky affair because the technology only functions when its configured properly. Technology that is not properly implemented will not secure a network and cannot be relied upon. In short the relationship between cost and cybersecurity are in every way tied to one another and a constant struggle.

Meeuwisse, R. (2019). Is Effective Cybersecurity Expensive? Retrieved from

https://www.infosecurity-magazine.com/blogs/effective-cybersecurity-expensive