Re: About time too
I'm unconvinced that the serial fines on financial services companies for various crimes have made the slightest difference to the overall culture that making money is an imperative before all others. And I therefore conclude that increased fines will mean the level and prominence of security theatre will increase in companies, but that the actual security will probably take a back seat in technology and budgeting decisions.
Risk, in corporatespeak is the significance of an event happening, multiplied by a guessed probability. If you can convince yourself that the probability is low, then the overall risk is low, and you don't need to invest money for security. Welcome to TalkTalk.