Call us now:
This is going to be one to watch Ted Dziekanowski for many reasons. Firstly the allegations may have already made their way to Congress and Federal Agencies citing issues of national security and poor management of internal controls. An effort by some senior management to cover up poor security. Allegations that government regulators and the company board has been misled by senior management.
‘What Zatko says he found was a company with extraordinarily poor security practices, including giving thousands of the company’s employees — amounting to roughly half the company’s workforce — access to some of the platform’s critical controls. His disclosure describes his overall findings as egregious deficiencies, negligence, willful ignorance, and threats to national security and democracy.’
‘Zatko soon learned it was impossible to protect the production environment. All engineers had access. There was no logging of who went into the environment or what they did…. Nobody knew where data lived or whether it was critical, and all engineers had some form of critical access to the production environment. Twitter also lacked the ability to hold workers accountable for information security lapses because it has little control or visibility into employees’ individual work computers, Zatko claims, citing internal cybersecurity reports estimating that 4 in 10 devices do not meet basic security standards.’
This case is going to be one to place close attention to given the role of the Whistleblower in the organisation and the nature of the allegations. Allegations that in themselves are very serious ranging from misleading market regulators (and markets) to national security.
#cybersecurity #cyberriskmanagement #cyberrisk #theaugustagroup #regulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6967811726041882624