Subscribe to our mailing list

* indicates required

 

 

 

 

BROWSE BY TOPIC

ABOUT FINANCIALISH

We seek to provide information, insights and direction that may enable the Financial Community to effectively and efficiently operate in a regulatory risk-free environment by curating content from all over the web.

 

Stay Informed with the latest fanancialish news.

 

SUBSCRIBE FOR
NEWSLETTERS & ALERTS

FOLLOW US

Archive

How Secure Is Your Firm's Internet Security Consultants

August 23, 2011

With cyberattacks on the rise, it seems hackers are looking for ever-bigger trophies to brag about - say, Internet security firms.  The very companies entrusted with protecting sensitive corporate and government data are being targeted for cyberattack with increasing frequency.  Take for example:

ManTech International, a $2.6bn computer security company that holds a major FBI contract.  In early August, internal company documents were stolen by the so-called 'hacktivist' group Anonymous.

RSA, a company who produces electronic security tokens for numerous industries, was breached in March.  Some of those tokens were used to crack Lockheed Martin, the largest military contractor in the country.  The attackers have yet to be found or even identified. The debacle has so far cost RSA about $90mn.

Silver Lining Behind the Clouds.   While these breaches have caused a certain amount of embarrassment, their prevalence within the industry has helped to make the industry more security.  Experts see the high number of attacks as both a wake up call and impetus for change within security companies.  Additionally, the increased publicity of attacks may prove to be a boon for the security industry as other firms dedicated more funds to their IT budgets.    [NYTimes, 8/4/11]

C-I Note:   To the extent that these breaches indicate weaknesses in the design of security systems - perhaps some of the same systems that have been installed at financial institutions - it would be prudent for firms to inquire as to whether their own internet security consultants have been attacked and whether such incidents may indicate some risk to clients, themselves.  A call certainly can't hurt.