4 ms·
> Colonial says it has strengthened data-loss-prevention defenses with three different software tools that provide alerts when data leaves the network. So they
by js2 5y ago
> Colonial says it has strengthened data-loss-prevention defenses with three different software tools that provide alerts when data leaves the network.
So they hired a consultant to produce a report. Then they purchased enterprise software. In my experience, this will not lead to a good outcome.
Ideally, it shouldn't be the case that Colonial needs to have information security expertise on staff, just like ideally, they shouldn't need to have physical security expertise on staff.
But in the real world, that obviously isn't the case. In 2021, every company is a tech company, and information security isn't something you can outsource. I wish that weren't the case and that we did a better job building software and designing systems to be secure by default. But we're nowhere close to that world.
- newsclues 5y agoHere is the two step solution. 1/ Digital security insurance 2/ Digital Security Jump Starting… like when your battery is dead you connect it to a functioning battery with jumper cables. There needs to be a service industry for bringing in fresh IT security systems and (re)establishing baseline IT security that meets the standard of the digital insurance industry.
- pomian 5y agoLooks like you just created a great job, startup, opportunity. You should run with it! Great idea.
- crmd 5y agoStep 1. Fire the current CEO Step 2. Tell the new CEO candidates why the last guy got fired. That’s all the board has to do. You can be damn sure the next CIO and CSO will be empowered to build and run a security-first organization. On the other hand, if the current CEO is let off the hook, nothing material will change as hacking will be treated as a PR problem to be solved again in the future by PR people.
- PhantomGremlin 5y agoStep 1. Fire the current CEO Yeah, in an ideal world. No, in the real world he's doing exactly what the owners want. They are typical of the private equity crowd. This pipeline was built 60 years ago. It's been paid for many times over. Now it's being managed for maximum cash extraction. The Colonial board is motivated only by money. My alternative solution would be: Step 1: Fine the pipeline company $1,000,000,000 because they're deliberately being a bunch of incompetent asswipes. That's the way you get the attention of those people. That's the only way. Sadly, the US Supreme Court has taken a rather dim view of "excessive fines". Still, I'm sure that smarter people than I can think of some way to hit the company's board of directors with a financial clue-by-four.
- crmd 5y agoI hear what you’re saying but I think it could also be done with the carrot instead of the stick. I believe Colonial’s largest shareholders are Koch, KKR, and Shell. If Secretary Granholm privately tells Messrs. Koch, Roberts, and Mackenzie that the US government would look favorably on a CEO replacement, they’ll each ask for something proportional their firms want that Granholm can help with, and Blount will be out the door tomorrow with his golden parachute.
- js2 5y agoThis is the same pipeline that leaked over a million gallons of gasoline without Colonial even noticing. Two teenagers reported it after smelling it while out riding ATVs. https://www.wcnc.com/article/news/local/ncdeq-colonial-pipeline-spill-huntersville/275-70e16fb6-c945-4634-b933-3975d0573f2e https://www.wcnc.com/article/news/local/ncdeq-colonial-pipel...