Direct costs of a breach

Is this an omen of things to come?

Apptis Inc., a military information technology provider, repaid $1.3 million of a $5.4 million Pentagon contract after investigators said the company provided inadequate computer security and a subcontractors system was hacked from an Internet address in China.

http://www.washingtontimes.com/news/2009/jul/25/contractor-returns-money-to-pentagon/print/

Will implementation contractors be on the hook for failing to provide adequate information and network security for systems they install?  Quite frankly, you can’t outsource the responsibility for data security even if that “service” is provided by someone else.  Even if another party contributes to the financial burden of a breach, the impact to reputation can take some work to recover.

When using a consultant or contractor to implement any new system, having security oversight is an essential piece of the overall project.  It’s a dual responsibility at best.   Regardless of what the marketing slicks say, implementers, contractors, consultants, etc. are profit motivated.  Security may not be at the top of their list.

Comments

  1. Zashkaser says:

    Excellent review! Mint takes Ubuntu and makes it work! After your review, I plan to use it.

  2. Sdanektir says:

    You know, I didn’t even see Casper’s comment when I made mine (how could I miss that?). Sorry Casper, you had it first!

  3. Vivalkakira says:

    i found you by link from the Directory Listing Script from Ash.. Nice to read your blog ^.^

Speak Your Mind

*