[Steve Watts, co-founder of SecurEnvoy] said: \u201cThe RSA Security breach occurred in mid-March, which has given its users more than two months to review their reliance on RSA Security’s technology on their systems. So the question here is: what has Lockheed Martin’s IT department been doing for the last ten weeks?<\/p>\n
\u201cThat entire affair should have triggered alarm bells ringing in any corporate IT security office, especially given RSA’s deafening silence at the time. For Lockheed Martin’s IT security managers to blame an apparent successful incursion into their systems on a ten-week old widely-reported breach of one of their key IT suppliers is diverting publicity from its own security process failings.\u201d<\/p><\/blockquote>\n
This is quite an important point. When the news of RSA’s breach became public knowledge, any organisation using the tokens should have been doing a review of their security processes to see if it could affect them and, if so, how badly it would hit.<\/p>\n
It is imperative for any size organisation to keep ahead of security developments regarding the technology you use and when something does break you absolutely must<\/strong> convene a risk management group to determine your response. Even with an organisation the size of Lockheed Martin, 10 weeks is long enough to plan and implement a security risk mitigation strategy.<\/p>\nRSA shouldn’t be let off the hook here either. While they cant be blamed for wanting to minimise their reputational damage, their reluctance to admit to the scale of their system compromise has pretty much ensured that some of their customers will suffer the pain as well. A big player like RSA might get away with it, but realistically, it is a fair bet that there will be angry customers now who have no intention of remaining with their authentication system.<\/p>\n
Bringing this sort of event closer to home – a big brand like RSA or Lockheed Martin can survive this sort of damage (even if only just), where the costs can potentially spiral into $millions, but for the small to medium enterprise are things so easy? In Lockheed Martin’s case, it really is a situation where an ounce of prevention would have saved a pound of cure.<\/p>\n","protected":false},"excerpt":{"rendered":"
Lots of the publicity around the recent Lockheed Martin hack is pointing the finger in the direction of RSA. SC Magazine have an interesting summary of the situation but the best bit is towards the end: [Steve Watts, co-founder of SecurEnvoy] said: \u201cThe RSA Security breach occurred in mid-March, which has given its users more […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[3,21],"tags":[11,6,20,19,12],"class_list":["post-15","post","type-post","status-publish","format-standard","hentry","category-securitynews","category-security-risk-management","tag-hacking","tag-infosec","tag-risk-management","tag-srm","tag-vulns","entry"],"jetpack_publicize_connections":[],"yoast_head":"\n
Were RSA's SecurID Security Tokens to blame for Lockheed Martin Hack? - Halkyn Security Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Were RSA's SecurID Security Tokens to blame for Lockheed Martin Hack? - Halkyn Security Blog\" \/>\n<meta property=\"og:description\" content=\"Lots of the publicity around the recent Lockheed Martin hack is pointing the finger in the direction of RSA. SC Magazine have an interesting summary of the situation but the best bit is towards the end: [Steve Watts, co-founder of SecurEnvoy] said: \u201cThe RSA Security breach occurred in mid-March, which has given its users more […]\" \/>\n<meta property=\"og:url\" content=\"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Halkyn Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2011-06-01T07:58:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2011-06-10T19:19:50+00:00\" \/>\n<meta name=\"author\" content=\"Taz Wake - Halkyn Security\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/tazwake\" \/>\n<meta name=\"twitter:site\" content=\"@HalkynSecurity\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Taz Wake - Halkyn Security\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/#article\",\"isPartOf\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/\"},\"author\":{\"name\":\"Taz Wake - Halkyn Security\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/person\/6eb0b544119827df120fb596772d25bc\"},\"headline\":\"Were RSA’s SecurID Security Tokens to blame for Lockheed Martin Hack?\",\"datePublished\":\"2011-06-01T07:58:13+00:00\",\"dateModified\":\"2011-06-10T19:19:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/\"},\"wordCount\":416,\"commentCount\":0,\"publisher\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#organization\"},\"keywords\":[\"Hacking\",\"Information Security\",\"Risk Management\",\"Security Risk Management\",\"Vulnerabilities\"],\"articleSection\":[\"Security News\",\"Security Risk Management\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/\",\"url\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/\",\"name\":\"Were RSA's SecurID Security Tokens to blame for Lockheed Martin Hack? - Halkyn Security Blog\",\"isPartOf\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#website\"},\"datePublished\":\"2011-06-01T07:58:13+00:00\",\"dateModified\":\"2011-06-10T19:19:50+00:00\",\"breadcrumb\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Halkyn Security\",\"item\":\"http:\/\/www.halkynconsulting.co.uk\/a\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security News\",\"item\":\"http:\/\/www.halkynconsulting.co.uk\/a\/category\/securitynews\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Were RSA’s SecurID Security Tokens to blame for Lockheed Martin Hack?\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#website\",\"url\":\"http:\/\/www.halkynconsulting.co.uk\/a\/\",\"name\":\"Halkyn Security Blog\",\"description\":\"Specialist Security & Risk Management Consultants\",\"publisher\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\/\/www.halkynconsulting.co.uk\/a\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#organization\",\"name\":\"Halkyn Consulting\",\"url\":\"http:\/\/www.halkynconsulting.co.uk\/a\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2011\/07\/Untitled-1.png?fit=990%2C170&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2011\/07\/Untitled-1.png?fit=990%2C170&ssl=1\",\"width\":\"990\",\"height\":\"170\",\"caption\":\"Halkyn Consulting\"},\"image\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/2329571\",\"https:\/\/twitter.com\/HalkynSecurity\"]},{\"@type\":\"Person\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/person\/6eb0b544119827df120fb596772d25bc\",\"name\":\"Taz Wake - Halkyn Security\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6689803eeae3e16b54fab3a7a1dfd1a5ee70f3ca1a83e77278a1b1adfedc4260?s=96&d=retro&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6689803eeae3e16b54fab3a7a1dfd1a5ee70f3ca1a83e77278a1b1adfedc4260?s=96&d=retro&r=g\",\"caption\":\"Taz Wake - Halkyn Security\"},\"description\":\"Certified Information Systems Security Professional with over 19 years experience providing in-depth security risk management advice to government and private sector organisations. Experienced in assessing risks, and producing mitigation plans, worldwide in both peaceful areas and war zones. Additionally, direct experience carrying out investigations into security lapses, producing evidential standard reports and conducting detailed interviews to ascertain the details of the incident. Has a detailed understanding of the Security Policy Framework (SPF) and JSP440, as well as in depth expertise in producing cost-effective solutions in accordance with legislative and regulatory guidelines. Experienced in accrediting establishments and networks as well as project managing the development of secure, compliant, workable business processes.\",\"sameAs\":[\"http:\/\/www.halkynconsulting.co.uk\",\"https:\/\/twitter.com\/https:\/\/twitter.com\/tazwake\"],\"url\":\"http:\/\/www.halkynconsulting.co.uk\/a\/author\/tazwake\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Were RSA's SecurID Security Tokens to blame for Lockheed Martin Hack? - Halkyn Security Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/","og_locale":"en_GB","og_type":"article","og_title":"Were RSA's SecurID Security Tokens to blame for Lockheed Martin Hack? - Halkyn Security Blog","og_description":"Lots of the publicity around the recent Lockheed Martin hack is pointing the finger in the direction of RSA. SC Magazine have an interesting summary of the situation but the best bit is towards the end: [Steve Watts, co-founder of SecurEnvoy] said: \u201cThe RSA Security breach occurred in mid-March, which has given its users more […]","og_url":"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/","og_site_name":"Halkyn Security Blog","article_published_time":"2011-06-01T07:58:13+00:00","article_modified_time":"2011-06-10T19:19:50+00:00","author":"Taz Wake - Halkyn Security","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/tazwake","twitter_site":"@HalkynSecurity","twitter_misc":{"Written by":"Taz Wake - Halkyn Security","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/#article","isPartOf":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/"},"author":{"name":"Taz Wake - Halkyn Security","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/person\/6eb0b544119827df120fb596772d25bc"},"headline":"Were RSA’s SecurID Security Tokens to blame for Lockheed Martin Hack?","datePublished":"2011-06-01T07:58:13+00:00","dateModified":"2011-06-10T19:19:50+00:00","mainEntityOfPage":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/"},"wordCount":416,"commentCount":0,"publisher":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#organization"},"keywords":["Hacking","Information Security","Risk Management","Security Risk Management","Vulnerabilities"],"articleSection":["Security News","Security Risk Management"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/#respond"]}]},{"@type":"WebPage","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/","url":"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/","name":"Were RSA's SecurID Security Tokens to blame for Lockheed Martin Hack? - Halkyn Security Blog","isPartOf":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#website"},"datePublished":"2011-06-01T07:58:13+00:00","dateModified":"2011-06-10T19:19:50+00:00","breadcrumb":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/"]}]},{"@type":"BreadcrumbList","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/2011\/06\/were-rsas-securid-security-tokens-to-blame-for-lockheed-martin-hack-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Halkyn Security","item":"http:\/\/www.halkynconsulting.co.uk\/a\/"},{"@type":"ListItem","position":2,"name":"Security News","item":"http:\/\/www.halkynconsulting.co.uk\/a\/category\/securitynews\/"},{"@type":"ListItem","position":3,"name":"Were RSA’s SecurID Security Tokens to blame for Lockheed Martin Hack?"}]},{"@type":"WebSite","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#website","url":"http:\/\/www.halkynconsulting.co.uk\/a\/","name":"Halkyn Security Blog","description":"Specialist Security & Risk Management Consultants","publisher":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/www.halkynconsulting.co.uk\/a\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#organization","name":"Halkyn Consulting","url":"http:\/\/www.halkynconsulting.co.uk\/a\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2011\/07\/Untitled-1.png?fit=990%2C170&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2011\/07\/Untitled-1.png?fit=990%2C170&ssl=1","width":"990","height":"170","caption":"Halkyn Consulting"},"image":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/2329571","https:\/\/twitter.com\/HalkynSecurity"]},{"@type":"Person","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/person\/6eb0b544119827df120fb596772d25bc","name":"Taz Wake - Halkyn Security","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6689803eeae3e16b54fab3a7a1dfd1a5ee70f3ca1a83e77278a1b1adfedc4260?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6689803eeae3e16b54fab3a7a1dfd1a5ee70f3ca1a83e77278a1b1adfedc4260?s=96&d=retro&r=g","caption":"Taz Wake - Halkyn Security"},"description":"Certified Information Systems Security Professional with over 19 years experience providing in-depth security risk management advice to government and private sector organisations. Experienced in assessing risks, and producing mitigation plans, worldwide in both peaceful areas and war zones. Additionally, direct experience carrying out investigations into security lapses, producing evidential standard reports and conducting detailed interviews to ascertain the details of the incident. Has a detailed understanding of the Security Policy Framework (SPF) and JSP440, as well as in depth expertise in producing cost-effective solutions in accordance with legislative and regulatory guidelines. Experienced in accrediting establishments and networks as well as project managing the development of secure, compliant, workable business processes.","sameAs":["http:\/\/www.halkynconsulting.co.uk","https:\/\/twitter.com\/https:\/\/twitter.com\/tazwake"],"url":"http:\/\/www.halkynconsulting.co.uk\/a\/author\/tazwake\/"}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9yHvD-f","jetpack_likes_enabled":true,"_links":{"self":[{"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/posts\/15","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/comments?post=15"}],"version-history":[{"count":3,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/posts\/15\/revisions"}],"predecessor-version":[{"id":23,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/posts\/15\/revisions\/23"}],"wp:attachment":[{"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/media?parent=15"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/categories?post=15"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/tags?post=15"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}