[ISN] Bribery case creates possible IT security nightmare in D.C.

From: InfoSec News <alerts_at_private>
Date: Mon, 16 Mar 2009 02:14:22 -0600 (CST)
http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=security&articleId=9129663

By Patrick Thibodeau and Jaikumar Vijayan
March 13, 2009
Computerworld

After being arrested on bribery charges yesterday, the District of 
Columbia's top information security official is being held without bail, 
partly because of uncertainty about whether he still has the ability to 
access the district's IT systems.

That's just one of many potential security issues facing D.C. government 
officials after the FBI raided the district's IT offices and arrested 
Yusuf Acar, its acting chief security officer, and a second man in 
connection with an alleged bribery scheme.

For instance, Acar had access to personnel data and other confidential 
information in the district's systems as part of his job. Court 
documents submitted by the FBI claim that several other district 
employees were also involved in the bribery scheme. Security analysts 
warn that Acar and his alleged accomplices could have created backdoors 
into systems. And since the alleged scheme included misdoings on a 
purchase of security software, there may be questions about the quality 
of the district's security tools.

>From an IT security standpoint, municipal officials in Washington have a 
nightmare on their hands, said Johannes Ullrich, chief technology 
officer at the SANS Institute's Internet Storm Center in Bethesda, Md.

[...]


_______________________________________________      
Best Selling Security Books and More!
http://www.shopinfosecnews.org/
Received on Mon Mar 16 2009 - 01:14:22 PDT

This archive was generated by hypermail 2.2.0 : Mon Mar 16 2009 - 01:22:12 PDT