Reader Comments (rss)

(Flattened / Threaded)

1.  

   Corporate Indifference

   

   Anonymous Coward, Feb 5th, 2009 @ 5:53pm

   
   

   "an acceptable cost of business"
   
   It's not acceptable to me, because ultimately the consumer is the one paying for their negligence.
   
   They have no reason to care.

   [ reply to this | link to this | view in thread ]

2.  

   Definitely not acceptable to me...

   

   Bear, Feb 5th, 2009 @ 6:41pm

   
   

   ...since I'm the CTO. Everything that has to do with IT is my responsibility.

   [ reply to this | link to this | view in thread ]

3.  

   Attitude is Everything

   

   TW Burger, Feb 5th, 2009 @ 6:49pm

   
   

   I write security software for a large retailer and everything here is built for as much security as is practically possible.
   
   However, I can attest that the biggest threat to data security is not a not so thoroughly parsed parameter or a port in a fire wall that is left open, it is, as stated, insider negligence. Plain corruption may account for some problems but the bulk of the issues are crappy passwords (ironically my experience is that the more access a user has due to seniority and position the worse the password choice), leaving computers unattended, not wiping discarded hard drives, and not shredding papers that contain sensitive data.

   [ reply to this | link to this | view in thread ]

4.  

   Imprisonment and confiscation for Cxx-level officers

   

   Rich Kulawiec, Feb 6th, 2009 @ 4:18am

   
   

   The fix for this is precisely the same as that for other abuses which are either perpetuated or tolerated by Cxx-level officers of other companies (e.g., financial fraud): imprisonment and confiscation of all personal assets. I'm sure we could release any number of casualties of well-known failure called "The War on Drugs" in order to make room for them, and their own assets should be spent on paying for their confinement. Perhaps the prospect of sharing a cellblock with the executives of Citibank and TJ Maxx -- as well as some hardened criminals, let's make sure they're mixed in -- would cause these selfish, arrogant, worthless jerks to think about the consequences of their own greed before indulging it.

   [ reply to this | link to this | view in thread ]

5.  

   

   Anonymous Coward, Feb 6th, 2009 @ 8:09am

   
   

   The total cost to an organization that has a data breach is vastly under reported. The big problem is that most companies don't realize this until it has happened to them.

   [ reply to this | link to this | view in thread ]

Add Your Comment