Alan Paller and Stephen Northcutt (1)

"Very large businesses will require their e-business partners to comply with a set of operating regulations that ensure that minimum levels of security are maintained. (VISA has already begun for its 21,000 partners.)"

If it's already started, how can it be wrong?

What regulations?  Heuristics, maybe.

What sort of security? From whom?
Most crimes are still inside jobs.

How often will these regulations be updated? By whom?

My take? Wishful thinking.