Re: Password Security

[Jim Dillon <Jim.Dillon () CUSYS EDU>]

Regardless of the attorney's opinion, the common public reaction at
present is not favorable for a positive outcome.  Just like Duke and CU
got the public roasting for events that were not as portrayed by their
athletic teams, people are quite willing to cast blame and seek recourse
for data breaches and issues.  I believe the risk aspect is greater than
simply legal liability.  Legal liability is only one of the threats to
consider.

Jim

*****************************************
Jim Dillon, CISA, CISSP
IT Audit Manager, CU Internal Audit
jim.dillon () cusys edu
303-492-9734
*****************************************
 
 

-----Original Message-----
From: Steven Alexander [mailto:alexander.s () MCCD EDU] 
Sent: Tuesday, October 23, 2007 12:04 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Password Security

Anyone concerned about liability issues should talk to an attorney in
their jurisdiction.