Book Excerpt

Book Excerpt: The Adventures of an IT Leader, Part 3

A new CIO scrambles to contain a security breach—and to keep his job. Read the third installment of our exclusive series.

Friday, June 29, 9:12 a.m....

Barton and his direct reports had convened at 7:15 a.m., and they'd begun talking through a list of issues.

First, they needed to identify the security measures they wanted to implement to reduce the risk of future attacks. The upgrade project that had been rejected earlier would be accelerated, but Barton wanted them to figure out what else they could do.

Second, they needed to decide what should be done to make the company secure against additional mischief from the attack that had just happened. They had no smoking gun to tell them that there had been intruders, but neither could anyone think of a way a database index file could be renamed without someone meaning to do it.

Third, they needed to figure out what to recommend to Williams about what, if anything, they needed to disclose outside the company. This was the issue most likely to get people fired, the issue most likely to spell an ugly end for IVK.

Friday, June 29, 3:47 p.m....

Options were shaping up. The team would work on "future event avoidance" on a less urgent time frame, but the other two issues, recovery from the attack and what to disclose, had to be dealt with now. There were three possible courses of action:

1. Do nothing. Assume that the past mischief was the worst that the bad guys had intended—if in fact there had been bad guys.

2. Shut down the company except for operations that could run manually and rebuild critical systems from development files. This was the "playing it as safe as possible" option, but the shutdown would be noticeable enough from outside IVK that it would need to be explained.

3. Build a mirror site from development files and rebuild production systems after the mirror site was up and running. It would cost money and take a couple of weeks to assemble the necessary facilities and equipment.

1 | 2 | 3 |next page »

Comments

Share [+]

TOOLS

Comments

CONNECTIONS

Harvard Business Press

WHITE PAPERS

Exclusive Economist Intelligence Unit Research

Find out why - and how technology can help balance centralized control and individual autonomy.

How Data Mining Can Rock Your Career

Recently, U.S. News & World Report listed "data miner" as one of only a handful of careers core to today's digital enterprises. The University of Illinois at Chicago takes a look.

Upgrading to VMware vSphere with vWire

Learn how vWire can help ensure the success of your upgrade from ESX 3.x to vSphere.

Explore the Common Barriers to Virtualization

Discover best practices around furthering virtualization in a secure and compliant environment.

Practical Approaches for Securing Web Applications

Enterprises understand the importance of securing web applications to protect critical corporate and customer data. What many don't understand, is how to implement a robust process for integrating security and risk management throughout the web application software development lifecycle.

An Executive's Guide to Web Application Security

Since so many Web sites contain vulnerabilities, hackers can leverage a relatively simple exploit to gain access to a wealth of sensitive information, such as credit card data, social security numbers and health records. It's more important than ever to examine your Web application security, assess your vulnerability and take action to protect your business.

WEBCASTS