Information security expert: We face a dearth of good information about data breaches. Blame the system, not the victims, for identity fraud. We need fraud disclosure, not breach disclosure. Breach disclosures were designed to inform consumers so they can protect themselves, but now try to use them to make enterprise security decisions. We are making our security decisions based on breach disclosures mired in self-defensive public relations verbiage. We need more information on how to use these tools and technologies.”]
Source: https://www.darkreading.com/analytics/inconvenient-lack-of-truth