5 ms·
Asking for a ... friend. What is the mitigation against attacks like this? Seriously, it would appear that every organization is at risk of having a trusted i
by takinola 8y ago
Asking for a ... friend. What is the mitigation against attacks like this? Seriously, it would appear that every organization is at risk of having a trusted insider hand over keys to a competitor, criminals, etc. There must be a way to detect or protect against this, right?
- wmf 8y agoDual control (aka the two-man rule), separation of duties (person who requests a change isn't allowed to approve/implement it), mandatory vacation, etc. These policies have existing in fields like finance for a while.
- CodeWriter23 8y agoDon't do the crime if you can't do the time.