Officials Say U.S. May Never Know Extent of Snowden’s Leaks
(Updated by Endah)
The New York times article below discuss the lack of oversight and data control at alleged high security facility that Ed Snowden work at. The Government agency that employed the Snowden is to blame for the lack of procedure, process, and the purchase of the correct monitoring and security software and hardware. Additionally they did not have the correct process and procedures in place to prevent or minimize the risk from internal fraud and spying.
This is a classic case of not following and monitoring the users in a secure environment. What happened here in inexcusable. Yes, Snowden did steal data and commit fraud and other crimes. What is not excusable is how easy it was for him to do it.
Most of the technology issues I have seen in the office are caused by violating what I call the basic technology equation.
The equation is:
Procedure + Process + Purchase = Elegant Technology
Procedure includes the standard functional procedures + 360 degree communication with your audience.
- Procedure includes how you train, manage, and grow your teams. The team is the key. (Snowden was not managed)
Process includes how you handle the technology and the work done with it.
- Process includes how you control quality, control the facility, manage the technology and business process. (No prcess control)
Purchase includes the right tool for the right job at the best price.
- The right tool based on functionality and useability, do not choose the popular tool if it does not work well. (Wrong security solution)
The facility violated all parts of the equation and now they pay the ultimate price
Source link from the New York Times below: