Anthem Hack: Lessons For IT Leaders - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

CIO Insights & Innovation
Security & Risk Strategy
Team Building & Staffing
IT Strategy
Digital Business
Project Management
Programming Languages
Dr. Dobb's
Enterprise Applications
Operating Systems
Productivity/Collaboration Apps
Network Security
Careers & People
Threat Intelligence
IoT
Attacks & Breaches
Application Security
Cloud Security
Endpoint Security
Mobile Security
Perimeter Security
Risk Management
Operations Security
Analytics
Vulnerabilities & Threats
Security & Risk Strategy
Infrastructure as a Service
Platform as a Service
Software as a Service
Cloud Storage
Data Centers
Mobile Applications
Mobile Devices
Mobile Business
Enterprise Mobility Management
AI/Machine Learning
Big Data Analytics
Hardware/Architectures
Software Platforms
IoT
Networking
Wireless Infrastructure
Data Centers
Cloud Infrastructure
Careers and Certifications
Network Security
Government
Healthcare
Wall Street & Technology
Bank Systems & Technology
Insurance & Technology
Industries
Government
Healthcare
Wall Street & Technology
Bank Systems & Technology
Insurance & Technology
IT Life
Careers
Mobile
Mobile Applications
Mobile Devices
Mobile Business
Enterprise Mobility Management
Software
Enterprise Applications
Operating Systems
Productivity/Collaboration Apps
Comments
Anthem Hack: Lessons For IT Leaders
Newest First  |  Oldest First  |  Threaded View
Page 1 / 3   >   >>
StaceyE
50%
50%
StaceyE,
 User Rank: Ninja
3/24/2015 | 1:16:57 PM
Re: Anthem Hack
@ SaneIT

Very true. Then you have employees that don't follow protocols and put information at even greater risk. (Like someone we all know of that chose to employ her own server and email account while working for the state department...no names mentioned of course....)
Gigi3
100%
0%
Gigi3,
 User Rank: Ninja
3/3/2015 | 4:22:22 AM
Re: McGladrey and Data breach advice
"So what is the middle ground? We cannot have other parties trying to spy on the data we have trusted them with. How do we know that the third party is trusted?"

Sunita, certified by trusted agencies with certifications or accreditations.
SaneIT
50%
50%
SaneIT,
 User Rank: Ninja
3/2/2015 | 8:03:37 AM
Re: Anthem Hack
@StaceyE, a lot of professionals miss this point. They assume that they'll never get hacked or if it does happen that they'll notice right away and be able to shut the attack down quickly.  What we're seeing in the past 5 years or so are really slow leaks that go unnoticed for months if not years because thieves are not after a one time win.  They know that small transactions get lost in the noise and they are happy to have many small wins over one gigantic win that gets them shut down quickly.  We're crossing a threshold with cyber security now where we need to get our act together, most of the companies who have lost massive amounts of data have more people guarding their offices from people trying to steal paper and staplers than they have guarding their customer data. 
StaceyE
50%
50%
StaceyE,
 User Rank: Ninja
2/27/2015 | 2:18:08 PM
Re: McGladrey and Data breach advice
I agree with you completely. Security of data must be number one, and every possible step must be taken to avoid an external data breach. This is why security has to be an ongoing process with every company. System security must constantly evolve to keep up with the latest technology, and the latest threats. 

My doctors office refuses to use any type of technology for its patient information. The computers in their office are used to schedule appointments and keep patients contact information. I talked to my doctor about why they haven't adopted some type of CRM system for all their patient records and he said it is simply because they are afraid of a data breach. They would rather keep doing what they have been doing for decades (paper file) than risk losing patient data.
StaceyE
50%
50%
StaceyE,
 User Rank: Ninja
2/27/2015 | 2:12:18 PM
Re: Anthem Hack
Very good point. I think you are absolutely right. The least attention you get, the more apt you are to get away with the crime. 
SaneIT
50%
50%
SaneIT,
 User Rank: Ninja
2/26/2015 | 8:03:12 AM
Re: Anthem Hack: Lessons For IT Leaders
@SunitaT0

I'm not at all blaming developers or programmers and I do understand that they aren't the ones making the feature requests.  My point is that access to any and all data has become the standard.  Not only do people want their data they want it presented in multiple ways, exportable and easy to manipulate.  What I'm saying here is that without giving customers what they want you won't have much of a business.  Finding the balance between keeping customers happy and keeping them protected is a tough one.  Make them jump through too many hoops and you'll lose them,  hide their data from them and you'll lose them, get hacked and leak their data and you're lose them after they blast your company on social media for a week or two.

 
SunitaT0
50%
50%
SunitaT0,
 User Rank: Ninja
2/25/2015 | 1:43:42 PM
Re: McGladrey and Data breach advice
@anon: I agree. IT departments are already looking into newer types of security. A lot of companies have adopted homomorphic encryption and biometrics as explained by one of the articles on this website.
SunitaT0
50%
50%
SunitaT0,
 User Rank: Ninja
2/25/2015 | 1:34:39 PM
Re: McGladrey and Data breach advice
@gigi3: So what is the middle ground? We cannot have other parties trying to spy on the data we have trusted them with. How do we know that the third party is trusted?
SunitaT0
50%
50%
SunitaT0,
 User Rank: Ninja
2/25/2015 | 1:31:19 PM
Re: Anthem Hack: Lessons For IT Leaders
@saneIT: Developers have had a lot of trouble in keeping up with what the management/marketing people promise and what they deliver. Developers have never on one occassion tried to come up with something that clearly has problems. They always want the most secure form of software usage, however they are blown away with the standards that marketing people have set for the software, and this mismatch creates all the problems for the software security.
SunitaT0
50%
50%
SunitaT0,
 User Rank: Ninja
2/25/2015 | 1:25:15 PM
Re: Anthem Hack: Lessons For IT Leaders
@sachinEE: Data vulnerabilities would always be there and we cannot ensure proper protection to the end user, what we can do though, is facilitate alms to them in an event where such an attack occurs and people are affected.
Page 1 / 3   >   >>


2020 State of DevOps Report
2020 State of DevOps Report
Download this report today to learn more about the key tools and technologies being utilized, and how organizations deal with the cultural and process changes that DevOps brings. The report also examines the barriers organizations face, as well as the rewards from DevOps including faster application delivery, higher quality products, and quicker recovery from errors in production.
Download Now!
Editors' Choice
News
How COVID is Changing Technology Futures
Jessica Davis, Senior Editor, Enterprise Apps,  7/23/2020
Slideshows
10 Ways AI Is Transforming Enterprise Software
Cynthia Harvey, Freelance Journalist, InformationWeek,  7/13/2020
Commentary
IT Career Paths You May Not Have Considered
Lisa Morgan, Freelance Writer,  6/30/2020
Register for InformationWeek Newsletters
Video
Current Issue
Special Report: Why Performance Testing is Crucial Today
This special report will help enterprises determine what they should expect from performance testing solutions and how to put them to work most efficiently. Get it today!
Download This Issue!
White Papers
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Sponsored Video
Flash Poll