CSO online magazine, “The Resource for Data Security Executives”, mentioned Delta Initiative and the role that Phil Hill played in a recent security audit. Drazen Drazic, whose company performed the audit, described how Instructure views security as a competitive advantage.
When one of our clients recently threw out a challenge to their competitors in their industry to pick up their game in terms of not only security, but being more open about their security, it was the culmination to an engagement like no other we’ve ever been involved in. (http://www.instructure.com/blog/2012/01/24/some-secrets-hurt/)
First up, we’ve never had a client request a journalist [i.e. Phil – ed] be imbedded into a security testing exercise like this. This presented us with many things to think about.
While we were not totally against the concept, we did preach caution and somewhere along the way, we came to a middle ground with Instructure in terms of what would be published for all to see. You can read all about this; the history, driving forces, the approach and the results here: http://mfeldstein.com/analysis-of-instructure-security-testing/