IT security and compliance are at the top of everyone's agenda right now, and for good reason. The news over the past year seemed to be all about companies being breached in every industry. These are hardly new problems, and any responsible company has been investing in IT security and compliance for a long time. The problem is that the environment has changed, and the way the IT industry addresses security and compliance has not kept up. In particular, there are a number of distinctions and disconnections that are more of a product of technology and process limitations than real differences in approach. "Patching", "security" and "compliance" are often seen as distinct activities, implemented with different tools and sometimes even under different teams. At their core, though, all … [Read More]