Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« DNS Poisoning Patch: A Case Study in How to Respond | Main | Real Compliance Requires Technical Expertise »

Limewire, Explosives, and Other Things That Don't Belong on Your Network

The data breach at McLean, Virginia investment firm might night have been such a big deal if the records of a Supreme Court justice hadn't been disclosed. Too bad for the guy that installed LimeWire on his work computer that he just happen to expose his company's confidential client data. That's a career move right up there with Ed Norton's punching himself senseless in his boss' office in Fight Club.

The Washington Post reports that data on 2,000 of the firms client was disclosed. The breach appears to have lasted six months before it was discovered.

This breach could have been prevented with some common sense. It doesn't take a security professional to realize one should use work computers for work. We don't take company cars home for the weekend or walk out of the office with furniture that would look good in den. The same goes for company IT assets.

Next time you wonder why you have to sit through an HR training session where a colleague tells you things most kindergarteners know, remember this story.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/782

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net