5 ms·

Wow, MarketWatch is right. They are trying to erase Susan Mauldin (the former CISO), she is not even mentioned in this article. Does anyone with Google juice

by yebyen 9y ago

Wow, MarketWatch is right. They are trying to erase Susan Mauldin (the former CISO), she is not even mentioned in this article. Does anyone with Google juice have a way to recover the interviews that are referenced in [1]? I watched them before they came down on Sept 10, and they were eye opening. I can say with certainty that the transcripts are not complete, because I remember "resistance to cloud is futile" and other such gems which are nowhere to be found in the partial transcripts that you can still find on the linked archive.is pages. [1]: https://hollywoodlanews.com/equifax-chief-security-officer/ https://hollywoodlanews.com/equifax-chief-security-officer/

hn_throwaway_99 9y ago
This article, http://www.marketwatch.com/story/equifax-ceo-hired-a-music-major-as-the-companys-chief-security-officer-2017-09-15 http://www.marketwatch.com/story/equifax-ceo-hired-a-music-m... , is brutally ridiculous and unfair. The major point seems to be "Hah, they hired a stupid music major to be their Chief Security Officer!" Some of the best software developers I've known were music majors. I know nothing about Susan Mauldin, including any of her other qualifications or lack thereof, but implying someone is only qualified to do what their college major was tells me this author is a complete idiot.
- yebyen 9y ago
  That is not my purpose. I have no idea what her qualifications are, I saw the LinkedIn page and it contained almost no information. That is hardly relevant. I personally believe that she was backed into a corner, based on the interviews I watched from some time before the breach (that I can't show you, and I won't link to the transcripts because I know they are incomplete and by far less impactful.) She sounded to me, exactly like a person who was given a budget that was effectively no budget, and then put into this role because people with a larger stake were sure that she would comply when they said "this is your budget, and not a penny more." I know exactly what that is like, because I have been made CIO and put in that position before. (I'm sure she was better paid than I was...) There is absolutely 100% a coverup going on. I am so bummed that I did not save the interviews when I first watched them. You would agree too, if I could show you. Edit: Here is the transcript, but with the disclaimer that it is 100% not the full transcript. Although it is in her own words. Make your own judgement about her qualifications please. https://archive.is/6M8mg https://archive.is/6M8mg
  - deleted 9y ago
    [deleted]
  - yebyen 9y ago
    "I always say that given enough time, we can secure anything and find a way to say yes to it and business-driven CISOs are of that mind" It's really a pretty balanced interview. This is what she said. There was a second interview, but I'm a lot more incensed that this information is being suppressed than at any one thing she says. I want to be furious when she says things like "If a CISO can come up with a list of controls that he/she is comfortable with, then by and large the evidence proves that those controls are working effectively and are going to satisfy the elements of any framework that you use." but all this interview really can show is that she knows some jargon, and her mindset. And I think it's really (truly, not in a figurative sense but literally) criminal that this information is suppressed. This is the case study of an interview that reveals insights from the mind of a CISO before disaster strikes... I literally don't even care that she was a Music major, how can anyone justify taking this down? It's not just potentially criminal, it's also unconscionable. This should be preserved for posterity, I want to tar and feather the company, but I want to hear more from Susan Mauldin about what went wrong at Equifax. I don't just want this interview back online, I want there to be a follow-up to this interview! And if it takes a pardon from Trump to make that happen, let's start the conversation.
  - jlgaddis 9y ago
    I found it for you... gimme a few minutes... ----- Edit: Well, I found one video (11m30s), were there more? ----- Edit: From a quick check, this seems to be the same interview that was transcribed, though I'm not sure if it's the entire interview or even the one you were looking for: 80MB, M4V: http://evilrouters.net/media/susan_mauldin_cazena_interview_201603.m4v http://evilrouters.net/media/susan_mauldin_cazena_interview_... I'm uploading it to YouTube as well but I wouldn't be surprised if it gets taken down at some point.
    - yebyen 9y ago
      There was a second interview with Cazena that looked a lot like the first interview, but the topic was different. It looked like they were possibly recorded on the same day. Edit: Bless you for doing this, however you found it.
- pishpash 9y ago
  Her job titles since then on LinkedIn are "Professional."
  - codehusker 9y ago
    I don't understand why she put simply "Professional", but prior to Equifax she was: - Senior Vice President of Enterprise Security and Chief Security Officer at First Data - Senior Director of Information Security and Audit Compliance at Hewlett Packard - Group Vice President at SunTrust Banks - Vice President of Information Technology at First Commercial Brokerage - Vice President of Information Technology at E&I Cooperative Services
    - tanilama 9y ago
      None of the listing above told us what exactly she is doing as VP of those firms. No detail on whether she fulfill a tenichal role or administrative one.
      - thehardsphere 9y ago
        And "Vice President" is a relatively low seniority title at a bank, which the earlier firms seem to be.
- notyourday 9y ago
  The article is brutally correct and fair. She presided over a total security flop This means she had no job being a chief security officer.
Eridrus 9y ago
Isn't this the point of hiring a CISO? So that you can blame them instead of the CEO?
- yebyen 9y ago
  Well sure, I don't want to blame a person though. I'm sure there's enough blame to go around. It sure looks fishy though that this person is being swept under the rug. Either she is the scapegoat, or she knows who is responsible for this. I'd love to have her on record to testify about the culture and what happened some time before they've effectively paid her to go away, and stashed her somewhere off the coast of Bermuda.
tr1ck5t3r 9y ago
Sounds like Mr Robot Series 2 Episode 2 Price’s explanation of how the stock market and the economy work—and why the government has to give his company yet another bailout—is similarly entry-level. “Every day when that market bell rings, we con people into believing in something,” he says. “The American Dream. Family values. Could be Freedom Fries for all I care. It doesn’t matter as long as the con works and people buy and sell whatever it is we want them to. If I resign, then any scrap of confidence the public is already clinging on to will be destroyed. And we all know a con doesn’t work without the confidence.”

by yebyen 9y ago

hn_throwaway_99 9y ago

This article, http://www.marketwatch.com/story/equifax-ceo-hired-a-music-major-as-the-companys-chief-security-officer-2017-09-15 http://www.marketwatch.com/story/equifax-ceo-hired-a-music-m... , is brutally ridiculous and unfair. The major point seems to be "Hah, they hired a stupid music major to be their Chief Security Officer!" Some of the best software developers I've known were music majors. I know nothing about Susan Mauldin, including any of her other qualifications or lack thereof, but implying someone is only qualified to do what their college major was tells me this author is a complete idiot.

yebyen 9y ago
That is not my purpose. I have no idea what her qualifications are, I saw the LinkedIn page and it contained almost no information. That is hardly relevant. I personally believe that she was backed into a corner, based on the interviews I watched from some time before the breach (that I can't show you, and I won't link to the transcripts because I know they are incomplete and by far less impactful.) She sounded to me, exactly like a person who was given a budget that was effectively no budget, and then put into this role because people with a larger stake were sure that she would comply when they said "this is your budget, and not a penny more." I know exactly what that is like, because I have been made CIO and put in that position before. (I'm sure she was better paid than I was...) There is absolutely 100% a coverup going on. I am so bummed that I did not save the interviews when I first watched them. You would agree too, if I could show you. Edit: Here is the transcript, but with the disclaimer that it is 100% not the full transcript. Although it is in her own words. Make your own judgement about her qualifications please. https://archive.is/6M8mg https://archive.is/6M8mg
- deleted 9y ago
  [deleted]
- yebyen 9y ago
  "I always say that given enough time, we can secure anything and find a way to say yes to it and business-driven CISOs are of that mind" It's really a pretty balanced interview. This is what she said. There was a second interview, but I'm a lot more incensed that this information is being suppressed than at any one thing she says. I want to be furious when she says things like "If a CISO can come up with a list of controls that he/she is comfortable with, then by and large the evidence proves that those controls are working effectively and are going to satisfy the elements of any framework that you use." but all this interview really can show is that she knows some jargon, and her mindset. And I think it's really (truly, not in a figurative sense but literally) criminal that this information is suppressed. This is the case study of an interview that reveals insights from the mind of a CISO before disaster strikes... I literally don't even care that she was a Music major, how can anyone justify taking this down? It's not just potentially criminal, it's also unconscionable. This should be preserved for posterity, I want to tar and feather the company, but I want to hear more from Susan Mauldin about what went wrong at Equifax. I don't just want this interview back online, I want there to be a follow-up to this interview! And if it takes a pardon from Trump to make that happen, let's start the conversation.
- jlgaddis 9y ago
  I found it for you... gimme a few minutes... ----- Edit: Well, I found one video (11m30s), were there more? ----- Edit: From a quick check, this seems to be the same interview that was transcribed, though I'm not sure if it's the entire interview or even the one you were looking for: 80MB, M4V: http://evilrouters.net/media/susan_mauldin_cazena_interview_201603.m4v http://evilrouters.net/media/susan_mauldin_cazena_interview_... I'm uploading it to YouTube as well but I wouldn't be surprised if it gets taken down at some point.
  - yebyen 9y ago
    There was a second interview with Cazena that looked a lot like the first interview, but the topic was different. It looked like they were possibly recorded on the same day. Edit: Bless you for doing this, however you found it.
pishpash 9y ago
Her job titles since then on LinkedIn are "Professional."
- codehusker 9y ago
  I don't understand why she put simply "Professional", but prior to Equifax she was: - Senior Vice President of Enterprise Security and Chief Security Officer at First Data - Senior Director of Information Security and Audit Compliance at Hewlett Packard - Group Vice President at SunTrust Banks - Vice President of Information Technology at First Commercial Brokerage - Vice President of Information Technology at E&I Cooperative Services
  - tanilama 9y ago
    None of the listing above told us what exactly she is doing as VP of those firms. No detail on whether she fulfill a tenichal role or administrative one.
    - thehardsphere 9y ago
      And "Vice President" is a relatively low seniority title at a bank, which the earlier firms seem to be.
notyourday 9y ago
The article is brutally correct and fair. She presided over a total security flop This means she had no job being a chief security officer.

Eridrus 9y ago

Isn't this the point of hiring a CISO? So that you can blame them instead of the CEO?

yebyen 9y ago
Well sure, I don't want to blame a person though. I'm sure there's enough blame to go around. It sure looks fishy though that this person is being swept under the rug. Either she is the scapegoat, or she knows who is responsible for this. I'd love to have her on record to testify about the culture and what happened some time before they've effectively paid her to go away, and stashed her somewhere off the coast of Bermuda.

tr1ck5t3r 9y ago

Sounds like Mr Robot Series 2 Episode 2 Price’s explanation of how the stock market and the economy work—and why the government has to give his company yet another bailout—is similarly entry-level. “Every day when that market bell rings, we con people into believing in something,” he says. “The American Dream. Family values. Could be Freedom Fries for all I care. It doesn’t matter as long as the con works and people buy and sell whatever it is we want them to. If I resign, then any scrap of confidence the public is already clinging on to will be destroyed. And we all know a con doesn’t work without the confidence.”