In Depth

Ouch! Security Pros' Worst Mistakes

We've all done regrettable things on the job, but does any valuable wisdom come of it? Four security pros candidly explain their biggest blunders and what they learned in the process

By Bill Brenner, Senior Editor

Page 5

4. OPEN MOUTH, INSERT BOTH FEET, WITH SHOES

  • Mistake maker: Dave Bixler
  • Position: CISO, Siemens IT Solutions and Services Inc.
  • Location: Mason, Ohio
  • The incident: Sarcasm with the CEO

"Many years ago, during one of the last great e-mail-based virus outbreaks -- it was six or seven years ago and may have been the Anna Kournikova virus -- I was wearing two hats as the information security person, and also responsible for infrastructure, including the e-mail servers. The virus outbreak had spread rapidly through all seven of our mail servers, and by the time we had a virus signature that could clean out the virus, the mail servers had ground to a screeching halt.

"We took the servers offline and were in the process of getting them cleaned up when I received a call from the CEO, asking for a status. I proceeded to explain where we were, what the impact was, and how long it would take before the servers would be back online. At the end of my explanation, he joked 'Better you than me.' Naturally, my mouth engaged well in advance of my brain and I responded with 'Well, that's what you underpay me for.'"

THE LESSON
Think before you speak.

"Fortunately, my CEO had an excellent sense of humor and I was still employed the following day." ##

Editor's note: This is the first of a two-part feature. The next installment will focus on 'mistakes' that had a positive result for the security pros involved. If there's a mistake you would happily make all over again, e-mail bbrenner@cxo.com.

Other stories by Bill Brenner

CSO

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Security Directions: A Virtual Conference

Security Directions Available On Demand Sept. 30 - Dec. 30

Join us for a virtual event with candid, expert information on top security challenges and issues - all from the comfort of your desktop.

» Register Now

WEBCAST
Protecting PII: How to Work with IT to Manage Risk

Compuware Understand the critical nature of the test data privacy problem and get tips on how to work with IT to implement a test data privacy program.

» View this Webcast

Featured Sponsors