Andre Yee's Security Insider« Insider Attacks - Who's Behind the Curtain? | Main | Spam - The Four Letter Word Everyone Hates »
February 13, 2007An Ounce of Prevention Against Insider Attacks
My last post on insider attacks mentioned the importance on knowing who you're hiring for that oh-so-important IT admin position. Here's a Dec 2006, Information Week article - The Case for Background Checks essentially making the the same point.
Roger Duriono, was hired by UBS PaineWebber in 1999 without a background check which would have uncovered a police record. Instead, Duriono ended up committing computer sabotage by releasing a logic bomb which crashed a couple thousand corporate servers and temporarily interrupted trading for thousands of brokers. The financial loss wasn't detailed in the article but needless to say, the loss of trading business was far more than the cost of fixing the technical problem.
The lessons here are simple. When it comes to security, an ounce of prevention is worth a pound of cure. Background checks and character references matter. To the point I made in the last post, hire for technical expertise but if you think integrity or character isn't important....think again. I bet UBS wished they did.
Posted by andreyee in
Insider Attacks
|
Digg This|
Add to del.icio.us
Trackback Pings
TrackBack URL for this entry:
http://www.ebizq.net/mt/mt-tb.cgi/1353
