Re: Banc of America Article

[Sean Donelan <sean () donelan com>]

On Sat, 25 Jan 2003, Alex Rubenstein wrote:
> Does anyone else, based upon the assumptions above, believe this statement
> to be patently incorrect (specifically, the part about 'personal
> information had not been at risk.') ?

Patently incorrect?  No.  It is possible.

Even if the confidentiality of your data is protected, you are still
vulnerability to attacks on availability and integrity of the data.

For example, you may fully encrypt all your data, use VPNs, etc.  But you
can still loose service due to network congestion or routers failing due
to other unprotected traffic on your network.

One of the most common mistakes I see rookie security people make is
thinking "confidentiality" is the only business requirement.