Re: Survival of the fittest
> What you need is peer-review, get "good trusts/boards" to review ones not up to scratch and make real recommendations to bolster defense whilst removing aging kit and software.
Actually what I had in mind was a review board that didn't so much look at the technical aspects, but at the trusts' management competence to manage. The "severe" measures would be to decide which senior managers should be help personally responsible (for failing to keep their systems secure, for failing to abide by all the advisories, policies, warnings and instructions) and summarily dismissed for gross incompetence.
For that, a peer-review would not work as it's all a bit of a "boys club" (and girls, too). This would need outside, independent, counsel that might even decide there was scope for criminal prosecution. That would shake up the dumb fat and happy senior management. Especially if their pensions were forfeit!
Harsh? Yes! but that is nature's way.
Biting the hand that feeds IT
