Cyber Insurance Between the Lines
Shackleford writes "Security Focus has an article that discusses insurance policies regarding 'computer attacks and cyber sabotage.' It discusses a case in which an administrator who set up back doors in the system with which he was trusted deleted files to which he could access after he was fired. His company had insurance against dishonest acts by employees, but not against 'acts of destruction.' Eventaully, the company won, but the case went to litigation. So the lesson to be learned here is that your company may have 'cyber insurance' without knowing it, but you need to be sure about it."
I think it might be easier than that...
:)
Was the emplyee supposed to install the backdoor? If not... The dishonest act was committed before the employee was fired, and therefore it fits right in.
_If_ he was supposed to install the backdoor..... Hmmm.... Then somebody should get his head examined
//Patrik Graeser