[SCADASEC] GAO: TVA Power Plants Vulnerable to Cyber Attacks

[Matthew Franz]

>
> And here is the correct syllogism (I hope)...
>
>  Organisations need to ensure that their operations are as secure as
> possible.
> Compliance with a security standard does not prove that operations are as
> secure as possible.
> Organisations that are compliant with security standards have not proven
> that their operations are as secure as possible.

But organizations that suffer a breach, compromise still might be as
secure as possible -- compliant or not  :)

- mdf