Decision support: you can't outsource liability for security
Companies are increasingly concerned about the threat of being found liable as a result of negligence in security. To protect themselves, businesses should adopt and comply with information-security best practices and standards to validate due diligence.
Tort law in the United States requires four fundamental components: duty, negligence, damage, and cause. Each has an effect on information security.
[ Read more ]