Damned if you do damned if you don’t. On one hand we need security researchers to actively support the public and private sector identify system

← Back to Blog

Damned if you do damned if you don’t. On one hand we need security researchers to actively support the public and private sector identify system vulnerabilities. On the other we need to find mechanism so that they can do it without fear of prosecution.’Praising cybersecurity workers at a conference last year, the Labour security minister Dan Jarvis said: “This country, our country, is enormously in the debt of many of you in this room who strive day in and day out to protect us all. Your dedication and your accomplishments have never been more important.”’However, if you fall foul of the Computer Misuse Act, you could face prosecution. So prey tell, why would a researcher take the risk of reporting a vulnerability (there’s no bug bounty payment), and take the risk that they maybe prosecuted?@Thaddeus Dziekanowski Brian D. McCarthy Faisal KhanVeritas GRC#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7300428327645765632