You may have heard about this in the news over the weekend: apparently the Army psychiatrist turned Islamic extremist who killed 13 people at Fort Hood in November 2009 could’ve been prevented had the FBI and Army been communicating with one another.
Sadly the same poor communication exists in the corporate world. Along the same lines of this incident, based on what I see in my security assessments I can confidently say that any substantial data breach in any given enterprise is not going to be handled properly. There are breakdowns leading up to incidents and failures on the reactive side of the equation. It’s information systems complexity intertwined with the human propensity to ignore the obvious and push things off until they HAVE to be addressed just waiting to be exploited.
There are two other takeaways from this that cannot be ignored:
1) failed communications between government agencies always has been a problem and always will be – especially as government grows
2) government – including the police – is incapable of keeping us safe all the time
In both our personal lives and at work it pays to be vigilant.
“A business associate referred our company to Principle Logic when we were seeking a resource to perform vulnerability /penetration testing for our external and internal networks. We found Kevin Beaver to be professional, well informed, and easy to work with. His testing did not disrupt our networks, and his progress updates were timely.
His final report was very thorough and included security recommendations for our network environment. The executive leadership was so impressed with Kevin’s security expertise, they have extended their agreement to continue to perform periodic testing. We highly recommend Kevin Beaver and Principle Logic as a resource for network security testing.”