Some IT security people believe that their organizations should never fail to employ whatever resources are?

Question

Some IT security people believe that their organizations should never fail to employ whatever resources are necessary to capture and prosecute computer criminals. Do you agree? Why or why not?

Answer 1

Well it really depends on the organization and the management team making these types of decisions. Some IT folks don't see the "business side" of the issue. In order to prosecute someone for hacking your network you have to first admit that your customers data may have been compromised and you have/had weaknesses in your network. Most senior management does not want that type of publicity.
Also you have to take into account the costs of "whatever resources necessary"... if they prosecute someone does the company really get any money back from the work they put into building the evidence? You could be looking at a $100,000+ bill for evidence gathering, research, consulting....

Do I agree... Depends on what senior management decides. If they tell me to do whatever necessary (within legal limits) I will do that.