[jollofricepeas]

To clarify, I’m saying governments and regulatory bodies should improve mandates for fixing critical issues with the highest risk first (ie. Remediation).

It’s the same reason state govs in the US mandate car insurance or bonds for drivers.

Companies like people have limited resources, time and money so they should focus on where the risk lies.

Risk being impact multiplied by likelihood.

If you have to choose, which do you do first?

- Bump your library versions for all your apps

- Implement MFA for your customers