Securing data important?

Finally there is an article in thenewpaper talking about securing data to preserve trust written by a Dexter Ng, a chief technology officer of AntiHack.me agency based in Singapore. And I think this is a private organization expressing deep concern with the preservation and protection of data and looking from the perspective preserving trust of an organization.

The protection of data is important not just to preserve the trust of an organization in the eyes of its customers. It is far more important and serious than just this. Look at the data of ministries like defence and home affairs, and in the commercial sector the data of corporations and the banks. Can’t imagine what harm the software people could do to a bank if they turn rogues, not only stealing data and misusing the data, what about steal the banks money like the case of the Sri Lanka national bank? Even they start to transfer money out of the bank to their own accounts in some corners of the world? Imagine if the ministries like defence and home affairs were to engage foreigners or new citizens to manage and control their data and operating systems, what kind of risks are being exposed to the foreigners?

A private agency is showing concern about protection of data. Is there or are there govt agencies responsible for this role, regulating and monitoring the risks of exposing our data to foreigners in govt and private enterprises especially GLCs like the banks when a mishap can be disastrous? No, everyone very happy because nothing has happened except a few incidents involving the hacking of MOH? When nothing happens it is fine. And if it happens, then set up a COI to do the investigation and to make recommendations so that it would not happen again?

With the influx of foreigners especially in the IT industry and with foreigners dominating and controlling the IT systems of many big and sensitive organizations and probably even ministries, cannot imagine if the people responsible for the security of the country did not raise a red flag and set up an agency devoted specially to monitor and regulate this industry and the personnel, foreigners being hired in big numbers, overwhelmingly alarming numbers that would present a clear and present danger to organizations and country?

I just hope that I am wrong and they are looking into this seriously. But how are they going to vet foreigners when they have little means to know who they are, not even able to verify their qualifications to the extent that hiring foreigners with fake degrees and qualifications is a norm.

This is another big vulnerable area where Stupidity has no cure is very obvious looking at the tiada apa attitude of hiring so many so called foreign IT experts and professionals in highly sensitive organizations and departments.

Are the security people sleeping? None of their business until something happens or someone woke up and directed them to look into it?