August 19, 2013

NavalA couple of weeks ago, the NSA Director, General Alexander was quoted in a Reuters article saying that in order to limit data access and potential leakage, they will cut back on 90% of NSA system admin staff.

This statement drove lots of criticism, since it makes no sense to cut back on critical staff in a very disproportionate way, which makes us believe that there is something else there…

"At the end of the day it's about people and trust," Alexander said.

Maybe he should have phrased things a little differently: "At the end of the day it's about people and trust, plus monitoring the people you trust."

It seems like the real issue is not the number of people, but rather the number of people who hold administrative privileges. What you really need to cut is administrative privileges from 90% of the people.

Administrators should not be immune to scrutiny. In order to refrain from the next Snowden-like issue, segregation of control should be implemented, necessitating a collusion of at least two individuals of different teams to leak the data.

To do so, the security team should be supplied with a compensating monitoring system over files and database access which:

  • The administrator has no control of
  • Can only monitor access to the data rather than actually accessing the data(eliminating another potential backdoor)

”In God We Trust, All Others We Monitor”

Share:
Share on LinkedIn

Posted by Barry Shteiman at 04:41:33 PM


Tags:

Comments

Verify your Comment

Previewing your Comment

This is only a preview. Your comment has not yet been posted.

Working...
Your comment could not be posted. Error type:
Your comment has been saved. Comments are moderated and will not appear until approved by the author. Post another comment

The letters and numbers you entered did not match the image. Please try again.

As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.

Having trouble reading this image? View an alternate.

Working...

Post a comment

Comments are moderated, and will not appear until the author has approved them.