Quote:
Originally Posted by pilotbob
No, you misunderstand me. I said that even the most secure system can be violated by a person that has access. I'm not really sure how that can be fixed.
|
It can't be. The financial pages have regular stories on folks who used their knowledge of the systems to bypass internal controls at their companies to do things they shouldn't have, like the French trader who managed to accumulate something like 40 billion in losses at BNP.
He wasn't trying to be a bad guy or line his own pockets. He was trying to prove his worth as a trader, make money for his company, and get raises and promotions. He started out well, but when his bets turned sour he didn't know what to do.
The fix there isn't the systems -- it's addressing the corporate culture that encourages that sort of behavior. (Though fiddling with the systems to attempt to provide more control will be seen as a lot easier.)
______
Dennis