Like most of the security community, I have spent hours digesting the recently released U.S. House of Representatives Committee on Oversight and Government Reform report on the Equifax breach. I read the report with a mix of heartfelt empathy and fear-inducing understanding of some of the findings.
I feel empathy because my role has offered me a unique view on the size and scope of the threats facing many organization; fear because some of the practices outlined in the report are incredibly common across enterprises large and small. I have no insider knowledge of what occurred at Equifax, but here are some of the things in the committee’s report that immediately stand out.
