More Data Losses

CitiBank is the latest to report loss of data back up tapes.

When, oh when, will the financial services entities discover encryption?

Here at the Gartner IT Security Summit in DC there have been some GREAT sessions already. One moment in particular stands out. Bob Woodward moderated a panel of Cyber Security Czars which of course consisted of Howard Schmidt, Roger Cressey, and Amit Yoran. At the opening of the microphone to the audience Vic Wheatman (head of Gartner's security research group) asked Bob Woodward if he had already written the article that appeared right after Deep Throat revealed his identiy. The answer from Mr. Woodward: "Yes", he had written the article in preparation for the day when the best kept secret in Washington could be revealed. The follow up question from Wheatman: "How did you protect that particular piece of IP (Intellectual Property)?" All documents including that one that dealt with confidential sources were written on a separate computer that was not connected to the Internet. A very good practice. Was the document encrypted? No!

Oh wow. Mr. Woodward, I have one thing to say to you. Encrypt that stuff now.