System Auditor Interview Question:

Tell us what is the primary reason most companies haven't fixed their vulnerabilities?

Submitted by: Administrator

This is a bit of a pet question for me, and I look for people to realize that companies don't actually care as much about security as they claim to–otherwise we'd have a very good remediation percentage. Instead we have a ton of unfixed things and more tests being performed.

Look for people who get this, and are ok with the challenge.
Submitted by: Administrator