I am so pleased that the government, that is clearly world-leading in the arena of setting computer standards, and consummate at delivering computer systems that are on-time, on-budget and hugely successful, is going to create mandatory frameworks that we will all have to use and pay for - NOT!
If they go down this route there is a genuine risk that after you've paid all various minister's mate's companies for your audits, certifications, mandatory training and so on that there won't be any money left in the budget to pay for any actual security.
Biting the hand that feeds IT
