You Really Think ROCs Should Be Made Public?
Written by Evan SchumanWhen we announced our joint PCI/Mobile report with Forrester last week, we expected to see some interesting reactions as we asked people to weigh in on several controversial issues. But the preliminary results were a bit startling. For example, most respondents so far have said they wouldn’t change a thing about the PCI process, which is fascinating given how many nitpick complaints we hear about that process from retailers. (It’s probably the best overall approach available, but you’d make no changes? Really?) The second most-selected PCI response (thus far) has been “making all payment card industry compliance reports public so that competition can motivate my rival chains into doing the same security investments as I am.”
Retail IT execs generally have freaked out at the suggestion that any security reports be made public, which is why that answer startled us. Care to set the record straight by giving us your own answers?? It only takes a few minutes, it’s free and it’s guaranteed to add 11 years to your life. (That’s my favorite impossible-to-prove promise.) On a more mundane level, it will make the results more accurate (well, at least more to your liking) and help push the community in the right direction. Think of taking the survey as one of those adult responsibilities, like voting or eating high-fiber cereal: You know you should do it even though it’s not especially fun. (There’s a reason I don’t work in marketing.)
September 30th, 2010 at 3:55 pm
Why would anyone want the ROC made public. Does the executive understand the content within the ROC.
It contains the company hierarchy and network design. These items especially network design should never be made public. Copy of reports such as scan, firewall and server content is should be strictly confidential.
Why not just give-away your total infrasture and place it on the internet, I’m sure that Hackers would just love it just as much as your competition.
September 30th, 2010 at 6:21 pm
Agreed, which is why we flagged that answer. We wanted to alert readers so that they would answer the question properly–knowingly–before the results were final.