Discover the latest on compensation in infosec: trends, salary insights, and how it impacts retention and talent in the cybersecurity sector.
Search across headline titles and summaries.
Background for this topic.
Compensation in information security means implementing alternative controls when primary security measures cannot be applied or are insufficient. These compensating controls aim to reduce risk by providing a comparable level of protection, such as using enhanced monitoring or stricter access policies when a technical control like multi-factor authentication is unavailable. They are not permanent fixes but temporary or supplementary measures tailored to specific limitations.
Understanding compensation is critical because relying on weaker or indirect controls can introduce gaps exploitable by attackers if not carefully designed and maintained. Effective compensating controls must be regularly evaluated to ensure they address the exact vulnerabilities left open by missing or failing primary controls. This practice helps maintain security integrity and supports compliance with standards that require risk mitigation even when ideal controls cannot be deployed.
Weekly headline count for the current query.
Advocate General urges rethink of PSD2 to speed compensation after scams Analysis One of the European Union's top legal advisors is trying to change how banks treat cybercrime victims – meaning they could enjoy greater financial protections sooner than expected.…
Affected police officers squeezed mental health services, relocated over safety fears Police Service of Northern Ireland (PSNI) employees who had their details exposed in a significant 2023 data breach will each receive £7,500 ($10,279) as part of a universal offer of compensation.…
Credit agency offers own services as compensation Credit scoring and monitoring biz TransUnion says that it recently suffered a breach affecting nearly 4.5 million individuals.…
'Deserves fair compensation for the valuable and innovative services'? Which ones are those then? Meta has come out swinging following the European Commission's decision that its pay-or-consent model falls foul of the Digital Markets Act (DMA).…
Investigating compensation to police whose sensitive info was leaked in 2023 The Police Service of Northern Ireland (PSNI) has bailed two officers after they were arrested as part of a fraud investigation related to the payments to cops whose sensitive data was mistakenly published in 2023.…
Also, CISA cataloging new ransomware data points, 17k WP sites hijacked by malware in Sept., and more critical vulns Infosec in brief The fallout from the exploitation of bugs in Progress Software's MOVEit file transfer software continues, with the US Securities and Exchange Commission (SEC) now investigating the matter, and lots of affected parties seeking compensation. …