A couple days after I provided Leeda with access to the suspect’s email, her number flashed on my phone again.
I picked up the phone and said, “Hi, Leeda. Find anything interesting in that guy’s email?” I knew she wouldn’t tell me much, but I pried anyway. It was second nature.
I could hear the Internal Audit manager’s smile when she said,”Nice try, Mack. You know that street only goes one way, and you’re headed in the wrong direction.”
This is the third post in a series. See Behind Locked Doors: Part 2.
It was my turn to smile. “Yeah, and when the dump truck comes my way, it’s always empty, and I’m supposed to send it away full. What do you need now?”
“You fill my truck faster than anyone else, Mack,” Leeda continued, “so it’s partially your fault,”
Leeda then got to the point. “Anyway, are you familiar with the department layout of that the person I’m investigating is from?” Leeda asked.
I sat leaned back in my chair and stared at the ceiling, imagining the floorplan of that department in my mind. “Yes, I am. Why?”
“Did you know that that department has their own servers? And they are not in the data center, but in an office in that department? Did you know that, Mack?”
I was surprised, and I admited it. I hadn’t known.
“Mack, since you now know about it, I need you to access one of their servers and get a copy of one of the databases,” the internal audit manager said. “But you can’t let anyone know you obtained it,” she insisted.
“That’s going to take some time,” I replied. “And I can’t guarantee success,” I noted, my thoughts racing through the possibilities.
Leeda sighed. “Like the database, time is not something I have,” she said.
“Our suspect leaves for Europe on the company plane for some key meetings in 3 days. If he’s doing what it appears he’s doing, we can’t let him attend those meetings.”
“You’ll need time to steal that database and I’ll need time to review it, Mack. That doesn’t leave you much time to obtain it.”
Leeda spent a few minutes telling me exactly what she needed.
“Just great, Leeda. Just great. Call me in 24 hours.”
ITauditSecurity 
It’s interesting how wordpress gave me a sneakpeek for what’s in next week.
Behind Locked Doors: Conclusion
by ITauditSecurity
Most of the team deployed to the 2 departments and started emptying wastebaskets in the ‘wastebasket audit’ exercise, collecting all the trash in large carts on wheels. Two others were posted as look-outs in the main hallways outside the target department. I carried my black bag of tools and approached the door. I pulled out my […]
Read more of this post
ITauditSecurity | January 5, 2015 at 11:00 am
LikeLike
Kyle,
Wordpress didn’t do that; I did. It was a brain failure.
When I scheduled the post, I scheduled it for Jan. 2015 instead of 2016.
Glad I caught it when I did.
I was wondering whether anyone would comment on that.
Good ole user error, a.k.a., ID-TEN-T error.
If you haven’t heard that one before, replace the TEN with it’s number and read it again. ;)
LikeLike