Who is Working at Your Provider

Recent news about the hack at UK's Ministry of Defence has been a huge news item and for good reason. There are some calling out China, which they deny, and the mention that the service in question is outsourced to an external provider.

This led to go back to some comments on an earlier breach notice, let me explain.

In my opinion, one of the key differentiators at J2 Software is that we only use our own full-time staff to provide services to our customers. This is because we believe and look after our team. There is a heightened level of trust after a long verification and background process, we have ongoing monitoring and complete visibility.

Recently, #NCSC had an announcement calling out Chinese threat actors doing reconnaissance against email of members of parliament and compromising the UK Electoral Commissions systems years earlier.

Among the comments was an individual that is an IT Consultant & contractor who complained he was not getting paid enough and had "ZERO sympathy for any firm or even govt department that skimps on IT..." - SO, he believes they deserve to be compromised? Clearly stating his position on the matter.

Further along the same contractor he once again mentions pay and then he goes on to tell us how amazing the dark web vendors and #ranswomware gangs support is, touting their GREAT customer support and training. Which team is he on here? My opinion - the cyber criminals.

I then had a look at his work history to understand who or what sort of infrastructure he looks into or "protects". The last 4 work experiences listed has this potentially unscrupulous individual, who loves the work of the dark web and ransomware vendors, was for the NHS, A council, Met Police and UK Civil Service.

How are these background checks done, what ongoing monitoring of individuals working in critical government (or corporate) environments that would allow this.

The problem that we all need to understand is that not everyone works from the same place of principle that you do, there will always be those among us who want more and more or feel they deserve it. Many to a point where they will take it. People are both the key to staying safe and also our weakest point.

Would you trust this person to protect your business?

How are you managing your #insider #risk?

Take care out there.

#letstalk

Cheers for now

John