Lateral attacks into systems --- Shouldn't there be checks and balances placed as corporate policies with electronic footprints recording for persons who have been provided with access to sensitive infrastructure within an organization? If the IS Manager is permitted to move along with undeterred and unlimited access as a Master User, wouldn't we end up against a Michael Snowden-type scenario? which may be good or bad? Who monitors the cat who is after the cheese?

Source author: Bennette Thomas thomasb@dominica.gov.dm