The measures the department is now taking – permissions, auditing and monitoring – are some of the right measures to have taken *before* a breach occurred. Implementing them afterwards is simply too little, too late.

It is too late, because these really ought to have been in place at the very highest level well before the breach occurred – we are not talking about new security technologies, here. The data are highly personal to the individuals concerned and are permanent. You cannot change your data of birth or social security number in the way that you can a password. They need and deserve to be fully protected.

It is too little, because these measures, even upgraded, will not prevent insider breaches in the future. They will merely alert the IT team after a breach has occurred. The Department needs to implement a system that blocks any access attempt that is deemed suspicious. Having this type of system in place last March would have stopped the employee from downloading multiple applications while simultaneously alerting IT administrators that records were being compromised.

The public’s data need and deserve to be treated with more respect.

http://www.dailymotion.com/thatsfunny/video/12075251

Here’s our contact and web address:

JUNGLE ISLAND
1111 Parrot Jungle Trail
Miami, Fl 33132
305-400-7000
http://www.jungleisland.com