15
thoughts on this insider threat case?
(lemmus.org)
quick case study for the cybersec folks here. got this real story in my dpo class & wanted ur thoughts.
IT guy at a bank, last day of his notice period. a trainee saw him puttin some CD-ROMs in his bag & told security. they checked him at the exit and found a full export of the bank's top clients on the discs. guy got fired for gross misconduct & a police complaint was filed.
any red flags or stuff that stands out to u technicaly or otherwise ? i have my own ideas on this cas but curious what u guys think first?
thx ๐
Why did the bank have CD Roms/writers? Secure institutions computers from those devices, locked cases and physically secured ports. Network alarms triggered if anything gets inserted.
Edit: also alarms and logs of anyone who accesses large volumes of data, let alone copies.
Not all banks are chains, and banks are kinda well known for using antiquated systems.