4 ms·

"I'd fire everyone." Too late. They did that 3 years ago. Fired the IT staff and outsourced to India. A great decision that saved them tons of money. /s https:

by ss2003 6y ago

"I'd fire everyone." Too late. They did that 3 years ago. Fired the IT staff and outsourced to India. A great decision that saved them tons of money. /s https://sanfrancisco.cbslocal.com/2017/02/28/ucsf-tech-workers-have-last-day-on-job-after-outsourcing/ https://sanfrancisco.cbslocal.com/2017/02/28/ucsf-tech-worke... Fire the leadership from the top down. Every one approved outsourcing the IT staff.

carapace 6y ago
From that link: > This move will save UCSF $30 million over the next 5 years. So they're ahead? I'm being slightly snarky here, but also earnest. If they save 30 but lose 1.14 isn't it worth it?
- to11mtm 6y ago
  Depends what the total cost was for this... The 1.14M is just the ransom, doesn't account for how much money was wasted on other aspects of recovery and total downtime...
  - justinclift 6y ago
    Substantial reputational damage will have to figure in there somewhere as well. ;)
techie128 6y ago
> ...Fired the IT staff and outsourced to India... Are you asserting that the breach would not have happened if the IT operations were in-house? Could you also clarify why did you feel it necessary to qualify the location of outsourcing? If the project was outsourced to any other country besides India, this would not have happened?
- wizzwizz4 6y ago
  > If the project was outsourced to any other country besides India, this would not have happened? I think the emphasis is on the fact it was outsourced to another country; you can't generally check the credentials of someone on the other side of the world very easily. The University of Delhi probably has good IT staff, but “Delhi International Computer Help”? Probably not.
  - techie128 6y ago
    > you can't generally check the credentials of someone on the other side of the world very easily If that were true, we would not have any trust in global trade. There are plenty of IT companies that have all American IT workforce and still have suffered data breaches. The issue at hand is not checking someone's credentials here. The issue is the political undertone that OP has taken.

by ss2003 6y ago

carapace 6y ago

From that link: > This move will save UCSF $30 million over the next 5 years. So they're ahead? I'm being slightly snarky here, but also earnest. If they save 30 but lose 1.14 isn't it worth it?

to11mtm 6y ago
Depends what the total cost was for this... The 1.14M is just the ransom, doesn't account for how much money was wasted on other aspects of recovery and total downtime...
- justinclift 6y ago
  Substantial reputational damage will have to figure in there somewhere as well. ;)

techie128 6y ago

> ...Fired the IT staff and outsourced to India... Are you asserting that the breach would not have happened if the IT operations were in-house? Could you also clarify why did you feel it necessary to qualify the location of outsourcing? If the project was outsourced to any other country besides India, this would not have happened?

wizzwizz4 6y ago
> If the project was outsourced to any other country besides India, this would not have happened? I think the emphasis is on the fact it was outsourced to another country; you can't generally check the credentials of someone on the other side of the world very easily. The University of Delhi probably has good IT staff, but “Delhi International Computer Help”? Probably not.
- techie128 6y ago
  > you can't generally check the credentials of someone on the other side of the world very easily If that were true, we would not have any trust in global trade. There are plenty of IT companies that have all American IT workforce and still have suffered data breaches. The issue at hand is not checking someone's credentials here. The issue is the political undertone that OP has taken.