Picked up via @MikkoHypponen that some liveblogging was happening during a Sony press conference. I still won’t complain about their response to all of this, but…
No CSO level position? Weak. You’re how big with how much IP and data and how big if your digital footprint?
Known vulnerability but wasn’t known to you? What does that even mean? You think management is going to understand such vulnerabilities? Anyway, this means to me that either patching was broken or this was a reported hole in their systems that wasn’t addressed properly.
Rebuild/move data center with better security? Sounds almost like they just outsource their operations…that or moving your physical location isn’t going to help against a digital attack.