Of 20 recommendations, three had been fully implemented and six had been partially implemented, the latest report noted. When I read the audit, I said, You ve really gone easy on us, Nessi recalled. And she really had. On Nessi s first day at work, he walked into a secure systems area, and no one questioned his presence, he said. There really is no mentality of security, he said.
People trade passwords back and forth.
There wasn t proper management for removing people s access to systems after they left. There were no security background checks conducted at all. Administrators previously ran the show, he said. Now security is very heavy on our radar screen, Nessi said. In the new location, data center employees can start fresh, re-embracing measures that have been ignored over the years, he said.