CHAPTER 3 VIGNETTE “Trading Scandal At Societe Generale”

1.)      What is your reaction to this statement by Mr. Gumble?

             I agree about the statement of Mr. Peter Gumble. If you don’t want your employees to trick you or wrong deeds that might weaken your company-you should have atleast test or give them the chance to impress you and his courage and loyalty to his/her work. In that case, traders even at his young age can take aggressive positions.

2.)      What explanation can there be for the failure of SocGen’s internal control system to detect Kervie’s transactions while Eurex detected many suspicious transactions? 

SocGens as being the second largest bankingestablishments was so confident thst they never think of failing. Since they are so capable of gaining good result and that they are so illustrious in its accomplishments,  that’s why they never even bother to think that they may failed one day.

CASE STUDY #3 “Whistle-Blower Divides IT Security Community”

Discussions Questions

1.)      Do you think that Mike Lynn acted in a responsible manner? Why or why not?

I consider Lynn action’s as a responsible manner because, he was just being concerned about the danger that may cause of what he had just discovered. He’s just doing what he think is right for his country and the national infrastructure. It’s a good thing that he speak it out to the public and let IT security professionals have knowledge about how dangerous it is.

2.)      Do you think that CISCO and ISS were right to pull the plug on Lynns presentation at the Black Hat conference? Why or why not?

It’s a disrespectful manner for me in plugging out while Lynn is presnting. They should try to listen of what Lynn may say about his discovery. It might help them or the public and that they will be aware of the effect of this foundings. But maybe in some instances, CISCO and ISS find Lynn’s presentation as a thing that should not be taken seriously or that Lynn’s discovery is wrong.

3.)      Outline a more reasonable approach.

                 I consider one of the DEFCON hacker in his statement as a reasonable approach, “What Lynn ended up doing was describing how to build a missile without giving all the details. He gave enough details so people could understand how a missile could be built and they could take their research from there.”