Due Diligence and Ongoing Monitoring

 View Only
  • 1.  How not to handle a breach

    Posted 02-02-2021 03:19 PM
    The Washington State Employment Security Department is back in the news with another breach, this time of its third party data transfer vendor Accelion and a 20-year old product. Note that they had made a newer product available which ESD had not yet upgraded.

    "I want to be clear: This was an attack on a third-party service provider," McCarthy added. "The Employment Security Department did nothing to cause this, and is not responsible in any way for this incident."  Actually, you are, since you chose not to upgrade to current software.

    https://www.geekwire.com/2021/data-breach-exposes-1-6-million-washington-state-residents-filed-unemployment-claims-2020/