Issue link: https://securitytechnologyexecutive.epubxp.com/i/557126
July/August 2015 • SECURITY TECHNOLOGY EXECUTIVE 33 www.SecurityInfoWatch.com security is an afterthought. One thing you hear from many organizations is that the user demand for mobile connectivity to systems is a big offender in storing and transmitting authentication details securely. You can almost hear the arguments in FAA conference rooms about specialists and executives who are always on the run demanding access on their phones and tablets and how that has to be balanced with the sensitive security needs of their NAS systems. You may have been in meetings exactly like that yourself. Is The FAA A Mirror? When reports like the GAO's come to light and point out the flaws in security at a critical agency like the FAA, it's very easy to climb up on a high horse and judge. Yes, it's true that organizations like the FAA should be held to a high standard. That's exactly why organizations like the GAO exist. What you need to ask yourself is where does the vitriol come from? Are we truly so upset that the FAA has these issues or are we also a bit upset by this because we see so much of our own security efforts in the failures of the FAA? What would we think if the government wanted to raise airfare taxes to increase the FAA budget by an order of mag- nitude so that they could close these security gaps? As we go to our executives for funding to better our own security posture, we should ponder that. Those who live in glass firewalls should not throw stones. ■ About the Author: Jonathan Sander is STEALTHbits's Strategy & Research Officer. He is responsible for steering the direction of the company through corporate development and the products through product management. This involves working extensively with all STEALTHbits's clients and partners. As part of Quest Software from 1999 through 2013, He worked with the security and ITSM portfolios. He helped launch Quest's IAM solutions, directing all business development & product strategy efforts. Previous to that, Jonathan was a consultant at Platinum Technology focusing on the security, access control and SSO solutions. Request information: www.SecurityInfoWatch.com/10487869 #ShowOrange to show your support visit mission500.org/showorange for more details Join Mission 500 in our new initiative to help kids in need here in the U.S. Just wear or carry something orange on any Friday, take a selfe, send it to us to be posted on our Facebook gallery, and share it with your friends and colleagues on social media using our #ShowOrange hashtag. We'll also have weekly drawings with a small gift for each week's winner. And don't forget to donate on the site to help support this great cause.