EVENING NEWS EDITORIAL: Computer security a serious matter

Editorials

Discussion

April 11, 2009

Stories about handling of situation don’t match up so far

EVENING NEWS EDITORIAL BOARD The News and Tribune Sat Apr 11, 2009, 10:56 PM EDT

Computer hackers and criminals work around the world, around the clock trying to get information for their gain and others’ misery. It appears they might have an easy target in Clark County government.

A computer security issue nearly two weeks ago in the county auditor’s office could have allowed access to basically all information stored on county computers, including data that could put the county at risk of a lawsuit, such as protected medical records.

The person in charge of the office, Auditor Keith Groth, on Wednesday told The Evening News that password-recovery software — which can be used to access protected programs — was installed by an employee before the March 30 incident, with his knowledge. When The Evening News broke the story Sunday in an article, Groth did not mention he knew of the installation of the programs.

For the Wednesday article, Groth and Clark County Commissioner Ed Meyer said they were told, and believed, the two programs — known as “LCP” and “Cain & Abel” — were loaded onto three desk computers and one laptop computer so employees could work remotely from home.

The problem is those programs aren’t needed to network from different locations, and they can be used to steal information. The gravity of the matter was not lost on Matt Dyer, systems administrator for Clark County government.

“Due to the nature of these programs, this kind of activity cannot be tolerated and is illegal,” Dyer wrote in an e-mail to county commissioners upon learning of the issue.

Groth also said the employee who installed the software had access to the passwords of other auditor’s office employees. This goes against Indiana State Board of Accounts guidelines for computer use, a portion of which reads: “User identification codes and passwords may not be shared.”

Also, “Users other than system administrators and security administrators must be prevented from accessing sensitive operating system commands.” The employee in question is not an administrator.

That brings up a few possible scenarios to consider:

• Groth knew about the installation of the programs and their capabilities, and thus was negligent;

• Groth knew about the programs, but believed what the employee who installed them told him about the reasons for installation; or

• Groth did not know about the installation of the programs, but is saying he did to protect an employee.

For now, Groth says he’s investigating internally, and Meyer asked the Clark County Sheriff’s Department to investigate, which it is.

What’s quite apparent is that someone did something they shouldn’t have. It’s time to find out the reasons for those actions, who knew about them, and exactly when.

The Evening News editorial board is comprised of Publisher Jim Grahn, Editor Shea Van Hoy and Inside Sales Manager JoAnn Galligan. Responses can be e-mailed to shea.vanhoy@newsandtribune.com

Text Only | Photo Reprints

Editorials

OUR VIEW: Greenville town council president’s tactics inexcusable
Heading into Monday’s Greenville Town Council special meeting, the council president said he was not going to let members of the public speak on the matter of whether or not the town should hire Randal Johnes as its town manager.

February 9, 2012
OUR OPINION: NA-FC schools, we need to talk
On Friday, a group of Thomas Jefferson Elementary fifth-graders from the Greater Clark County Schools graduated from the Drug Abuse Resistance Education — or DARE — program. Some of you may have read the story or looked at the two photos in the weekend edition of the News and Tribune.

January 26, 2012
OUR OPINION: Open records violations need to carry financial punishment
January 15, 2012
CHEERS & JEERS: Dec. 10-11, 2011
December 9, 2011
LETTERS: Dec. 8, 2011
— Moore says thanks for years of support for Jerry’s

— Volunteers help make New Albany great

— Reader comments on Kraft’s letter

December 7, 2011
VAN HOY: Property tax caps put the squeeze on schools
In November 2010, 72 percent of Hoosiers cast a ballot in favor of adding property tax caps to the Indiana constitution. This came after two separately elected legislatures voted for the same measure.

December 7, 2011 1 Photo
OUR VIEW: Board needs to retain Daeschner
We realize these are just numbers, but they are the method instituted by the state and federal government to measure a school’s effectiveness. It’s understandable to take issue with how schools and students are measured. That’s not Daeschner’s fault. He is simply helping improve the school system in the required areas.

December 6, 2011
CHEERS & JEERS: Dec. 3-4
December 2, 2011
CHEERS AND JEERS — For Nov. 19-20
November 19, 2011
THEIR OPINION: Does Indiana’s primary process serve voters?
The existing rules prove there’s a modicum of support throughout the state to justify a presidential candidate’s name appear on a primary ballot, King says.

November 17, 2011
More Editorials Headlines

Editorials

Search Results

Discussion

EVENING NEWS EDITORIAL: Computer security a serious matter

Stories about handling of situation don’t match up so far

Site Map

Contact Us