New answers tagged disclosure
There should be an entity responsible for security, such as an (chief) information security officer. It's a usually their job to take reports like yours and find the quickest way to solve the problem without compromising business. Giving it to the IT department often makes it a "support request without stakeholder" meaning you can still work so it's not that ...
Top 50 recent answers are included