Slashdot Mirror

← Back to Stories (view on slashdot.org)

Pennsylvania CISO Fired Over Talk At RSA Conference

Posted by timothy on from the perfecting-the-art-of-the-ham-fist dept.

An anonymous reader writes "Pennsylvania's chief information security officer Robert Maley has been fired for publicly talking about a security incident involving the Commonwealth's online driving exam scheduling system. He apparently did not get the required approval for talking about the incident from appropriate authorities."

4 of 147 comments (clear)

  1. C Level Sec Exec is Fired? by introspekt.i · · Score: 3, Interesting

    Who fired him? Sounds like he made the wrong people look bad. Rules are rules, I suppose, but if the problem has been fixed, isn't talking about security and attack vectors generally a good thing?

  2. Spill the rest of the beans by Archangel+Michael · · Score: 4, Interesting

    If I were him, I'd start spilling all the info I ever had on security for the state. No amount of money or threats would stop me.

    I mean any and every item. I'd expose every stupid supervisory move that compromised security and my ability to protect the network. EVERYTHING would be exposed.

    Nothing worse than people getting their panties all in a wad over a "talk" about a well publicized incident, of which all the bad guys already knew about.

    There is only one thing these people understand, and that is how to look good. Ruin it for them.

    --
    Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
  3. Maybe sometimes, but not always by Mathinker · · Score: 5, Interesting

    If this were a private company I'd be of the opinion that their internal security is their concern but this is a government office and the people who pay the bills have a right to know what's going on.

    If the internal security failure lead to your private information being leaked and the possibility of financial loss to you, I think that you might be of the opinion that there should be legislation which deals with disclosure. Actually, there is such legislation in many jurisdictions. And you also have Sarbanes–Oxley stuff which is supposed to encourage whistleblowing.

    Some "internal" things are more internal than others....

  4. Re:"Lockdown" is the problem with Security by chill · · Score: 3, Interesting

    Except this is an ongoing police investigation. There is a difference. And a panel discussion isn't necessarily the best way to network with peers on issues like this. He made a mistake and paid for it. It was a bit harsh, but not totally out of line.

    --
    Learning HOW to think is more important than learning WHAT to think.