At yesterdays Committee hearings on the United Healthcare cyber attack, the CEO was at pains to say that one reason his systems were compromised was…

← Back to Blog

At yesterdays Committee hearings on the United Healthcare cyber attack, the CEO was at pains to say that one reason his systems were compromised was they were held on Prem. If the effected systems were in the cloud then they would be more secure.

I’ve been in banking for 25 years and I can safely say that banks have not all rushed to the cloud to manage all their services and for many reasons. It’s not to say that cloud is insecure, it’s to say that cloud presents many risks that need to be addressed in addition to those that have to be addressed on-Prem (the shared responsibility model).

It’s interesting to read the enclosed article ‘Migrating banks’ old technology to cloud computing systems is creating a cyber security nightmare for their IT and risk teams, experts have warned.’

To say that my systems were not in the cloud and therefore less secure is not correct. Poorly configured cloud and poorly secured cloud is as risky as poorly configured and secured on Prem infrastructure. One reason the EU introduced the Digital Operational Resilience Act (DORA) and NIS 2.

@Thaddeus Dziekanowski Brian D. McCarthy

Veritas GRC UnitedHealth Group Change Healthcare

#cybersecurity #cloudsecurity #cyberriskmanagement

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7191822716751020034