Security Responsibility Without the Authority?

Slashdot reader jamie submits this story about security administration. If you have the responsibility for security without the authority to make changes, your only role is to be the fall guy when something goes wrong.

Comments

Re:This was the reason

[mrchaotica]

But what exactly does that get you?

You misunderstood. "You" the company gets screwed, but "you" the manager or "you" the IT guy avoids getting fired. It's called putting your own best interests before those of the company.

Re:On the other hand

[Lumpy]

Actually yes. He teamed up with a small company here in town and formed a IT security company that consults with business and contracts with them for "repairing" the problems.

Funny part, I saw him here about 24 months later, we hired his company!

As for the managers and executives, I do not know.. All we know is that about 30 days after the lawsuit their offices were empty.