Question

One of the major complaints regarding information security regulations is that they place an unfair burden on organizations as they are costly unfunded mandates. Do you think that it is fair for governments to require private organizations to comply with regulations that will cost them money?

Answer 1

It is true that there are government enforced mandatory cyber security regulations that the private companies are supposed to follow.

It is also true that these regulations are a burden to the private companies with respect to cost. But these regulations are very much required in this erra of increasing cyber crimes. These regulations are mostly important for corporates dealing with insurance, communications, broad band etc.. because these companies deals with more sensitive information.

Since the cyber security measures are costly, government has actually initiated different measures like cyber insurance etc.