On Feb 25, 2009, at 12:00 AM, RECMGMT-L automatic digest system wrote:

>
> In my opinion, it is about configuration.  You either create a recipe
> for success or a recipe for disaster...depending on your needs.  The
> more seamless everything seems to the users, the more I start digging
> for potential security issues.
>
> Hope this didn't put you to sleep, but it has been a favorite study of
> mine in recent months.
>
> Angie Fares
> 817.415.4935
> [log in to unmask]

Angie,

I thought you gave a description that I could understand. Although I  
came away with the fear that each step along the way you caution  
against implementing in the wrong way as it leave huge exposure  
issues. The problem with technology that changes so fast is that no  
one seems to do it just right.

I did a server vault out west and it is critical that we provide  
sufficient wire ports (cable trays) for all their needs today and for  
the near term. Originally the IT Manager asked for four portals and  
for a small server vault that is sufficient. I then added an extra  
because we do not trust them to be accurate so we add one extra for  
safety sake. But then they hired a consultant who was the "Expert"  
and he added two more, then just before we were to arrive they added  
two more.  On something as simple as wiring they could not calculate  
their needs.  I cannot imagine that they got the other issues as  
refined as you described.

I think the mistake people make is assuming that everyone knows as  
much as the top 5% of the industry.  This means that 95% of the  
industry is building in or failing to close loop holes in the system.

But I thought your explanation was great and I saved it as a file to  
refer to as this is a complex area we are moving into.  I think we  
will see many huge failures in the future because it is far more  
lucrative to hyperjack one of these systems than to be an IT  
Manager.  I was told a good hacker can earn over $1 million per year  
and the criminal penalties doe not discourage them.  As IT Manager  
lose jobs in the coming months a whole new breed of hacker will be born.

Thank you for your explanation.  Now I am off to find a piece of  
cake.  :~)

Hugh Smith
[log in to unmask]

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]