Call us now:
Morgan Stanley Smith Barney (MSSB), now Morgan Stanley Wealth Management has been fined $35Mn by the SEC for its failure to protect its clients PII, that goes as far back as 2015. MSSB failed to properly dispose of devices containing its customers PII. The company that MSSB hired to move and dispose of its assets had no experience in decommissioning hard drives and servers that contained PII, MSSB failed to monitor the work of the destruction company and accounts were found of servers and hard drives that were resold to third parties.
I wonder if it was only PII that was compromised. I’m my experience servers are a treasure trove of security, configuration and Operating system data.
Cybersecurity is an extensive program that covers the asset management lifecycle that includes asset decommission, destruction and certification processes. As this action demonstrates the physical-logical divide.
Ted Dziekanowski
#cybersecurity #cyberriskmanagement #cyberregulation #governance #sec #theaugustagroup
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6978024591579312129