Originally posted by Forever_frost
View Post
All things do have vulnerabilities, just have to eliminate as much as possible and it's generally a lot harder to compromise a very secure network than it is to compromise some human.
Security includes but is not limited to...
Physical security (HUGE - think social engineering bypassing everything done)
Network security
Server sec (confused with network security sometimes and vice-versa)
Siloing the humans managing it all
Strict auditing and logging of everything
Application security
Generally any network compromised has failed in one or more of those areas. I know you see it on the news a lot, but I know several sec guys that have the authority they need and their networks have not been compromised since they've been in charge. One of them is a card processor that is HUGE.
There are other more qualified people to speak on this matter, but if done correctly - especially on a small scale it's very difficult to penetrate. If compromised, the data encryption is another hurdle to overcome on top of it all.
Now the only exception I'd make is if it's that important - the person who wants it to be so secure taking it themselves would be a lot less likely to switch sides. Still risks, but to say a 3rd party person (including employees) is better than a secure network - I just can't agree to that.
Comment