January 8, 2007 - 8:01 P.M.
It seems that, many times, information security professionals conduct themselves honorably in their day-to-day tasks but, during times of crisis (i.e. during incident response or when performing investigations), the rules go out the window. It’s not that good people suddenly turn bad; rather, the increased sense of urgency – then need to know what happened – pushes people to cut corners. Unfortunately, such deviations from proper procedure can have dire consequences. These consequences could lead improper handling of data, which (depending on the data in question) could lead to a larger incident than what sparked the initial incident response. Further, within the litigious society in which we live, there is always the possibility of a lawsuit. Lawyers love to find out that procedures have been circumvented.
...Read more