5 ms·

Isn't it annoying if you cannot transfer data from your Internet computer to your offline computer? And what's about cloud services?

by chmars 10y ago

mseebach 10y ago
There will usually be a one-way file copy service (with AV scanner) that you can use to transfer files to the secure network. No access to cloud services is very much a feature, not a bug, as these measures are implemented for security.
- geofft 10y ago
  The purpose of security is to help the business get its job done without disruption. If security were a goal in itself, you could just shut all the servers down and go home. If a "security" measure is causing disruption to the business, it's not doing its job.
  - unethical_ban 10y ago
    It's a spectrum. Business would be a lot easier for DBAs if there were no firewalls between PCI (credit card) data and their applications, but we do it because it mitigates risk.
    - geofft 10y ago
      DBAs as in database admins? I'm talking about the business goals of the company as a whole, not for individual employees / departments. The reason you want to mitigate risk is because you want the company to get its business done (i.e., you want customers to be willing to give you money). I don't think there's any spectrum here. Good security is what helps the company's business goals. Bad security (which isn't really security) hurts it. Sometimes there are legitimate questions about whether to optimize for short-term or long-term goals, but that's no different for every other business decision a company makes.
- marcosdumay 10y ago
  This is only usable on tasks that do not require you to publish the result of the work. That normally covers all high security work, but 99% of the work of a government is communicating with the public, on both directions.
jarman 10y ago
>cloud services If service is required for work - it should on corporate network.
Fuxy 10y ago
More interestingly this will probably result in all the Intranet computers being severely behind on security updates and becoming easier to hack. Plus how will government internet services be able to access data on the Intranet and vice versa. I suspect at some point the will end up with computers connected to both networks and those will need to be constantly monitored and kept secure. At the end of the day if they offer any internet based services to their citizens that data needs to make its way back to the Intranet somehow.

Isn't it annoying if you cannot transfer data from your Internet computer to your offline computer? And what's about cloud services?

by chmars 10y ago

Isn't it annoying if you cannot transfer data from your Internet computer to your offline computer? And what's about cloud services?

mseebach 10y ago

There will usually be a one-way file copy service (with AV scanner) that you can use to transfer files to the secure network. No access to cloud services is very much a feature, not a bug, as these measures are implemented for security.

geofft 10y ago
The purpose of security is to help the business get its job done without disruption. If security were a goal in itself, you could just shut all the servers down and go home. If a "security" measure is causing disruption to the business, it's not doing its job.
- unethical_ban 10y ago
  It's a spectrum. Business would be a lot easier for DBAs if there were no firewalls between PCI (credit card) data and their applications, but we do it because it mitigates risk.
  - geofft 10y ago
    DBAs as in database admins? I'm talking about the business goals of the company as a whole, not for individual employees / departments. The reason you want to mitigate risk is because you want the company to get its business done (i.e., you want customers to be willing to give you money). I don't think there's any spectrum here. Good security is what helps the company's business goals. Bad security (which isn't really security) hurts it. Sometimes there are legitimate questions about whether to optimize for short-term or long-term goals, but that's no different for every other business decision a company makes.
marcosdumay 10y ago
This is only usable on tasks that do not require you to publish the result of the work. That normally covers all high security work, but 99% of the work of a government is communicating with the public, on both directions.

jarman 10y ago

>cloud services If service is required for work - it should on corporate network.

Fuxy 10y ago

More interestingly this will probably result in all the Intranet computers being severely behind on security updates and becoming easier to hack. Plus how will government internet services be able to access data on the Intranet and vice versa. I suspect at some point the will end up with computers connected to both networks and those will need to be constantly monitored and kept secure. At the end of the day if they offer any internet based services to their citizens that data needs to make its way back to the Intranet somehow.