It appears the main problem in a mission critical environment like this is more related to HR hiring policies. If the IT people did not know about the T1, and left it unfiltered/monitored, then it would appear that they are hiring mere M$ trained technicians rather than properly trained and experienced IT and security personell. While this practice may save several hundred thousand a year in payroll, the long range risk should be evaluated.

One more example of just how seriously major businesses should look at having an MS system anywhere in their network. One simple spam email can ruin your week.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/6767/21705#21705