![]() |
Practical Guide to Database Security Download here |
Mar 16, 2009 | 05:20 PM
By Tim WilsonThe acting CSO and a consultant in the District of Columbia's technology office have been arrested for theft and corruption, leading to the temporary stepping down of their former supervisor, newly appointed White House CIO Vivek Kundra.
According to news reports, law enforcement officials arrested Yusuf Acar, acting CSO of the D.C. technology office, and Sunshil Bansal, a technology consultant. Acar is being held without bond; he is considered a flight risk after police found more than $70,000 in cash in his home.
Authorities say Acar and Bansal, along with others, defrauded the government through a variety of schemes, including billing the city for items that were never delivered and "ghost" contract employees who did not work. The scheme involved Acar's approving falsified bills and splitting the money with vendors -- including Bansal, who submitted them, court documents allege.
Bansal is a former city employee and founder and chief executive of Advanced Integrated Technologies. The company has offices in Washington and India, and did more than $13 million in business with the District of Columbia government in the past five years, according to court documents.
One contract involved providing computer support for the city's Department of Motor Vehicles. The company also was given a contract to upgrade the city's human resources computer records and sold virus detection software to the city.
The arrests and allegations have cast a shadow on Kundra, who is the first to hold the White House CIO position. Prior to his appointment, Kundra served as the chief of the D.C. technology office, and the accused offenders worked under him.
Officials in the D.C. government say they don't believe Kundra is a target of the investigation, but he is on leave until the investigation moves further ahead.
An FBI affidavit indicates that several other businesses and individuals were involved in the alleged schemes, but they're identified only by their initials. According to court documents, the FBI worked with another employee in the city's technology office, who was in on the scheme and secretly recorded conversations with Acar and Bansal as part of the investigation.
Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message
Inside Out: Protecting Your Partnerships -- and Your Data
Today's businesses depend on e-commerce among partners, but allowing third parties to access internal networks may endanger your data. How can IT security pros ensure that contractors, supplies and others get the access they need -- without becoming threats? This report offers some answers.
Rotten Apples: How To Detect And Stop Malicious Insiders In Your Organization
Most data leaks are unintentional - but in every enterprise, there are a few hard cases that defy this truism and threaten the very heart of your data.What can you do to stop these rotten apples from using their intimate knowledge of your organization - and its data access methods - to wreak havoc? This report offers a detailed look at how malicious insiders might attack your data, how they’re motivated, and what you can do to stop them.
Understanding The Insider Threat
Think you know your trusted users? Think again. The availability of new Internet technologies and the pressures of a spiraling economy are changing the nature of the data breach, and your employees may have their fingers on the trigger. This report offers a look at the full spectrum of insider threats, and the risks associated with each.
Other reports from the Insider Threat Tech Center:
| Sponsored by: | ![]() |
Anatomy of Insider Risk: Why You Could Be Your Worst Enemy
Organizations are typically aware of the problems they face from inside the firewall, but so many leaders focus on the risk of thieves and disgruntled employees that they leave too much room for error from the much more common insider threat: well-meaning, but negligent, insiders. Learn four steps to minimizing the risk.
Three Ways to Prevent USB Insecurity in Your Enterprise
As the advances in USB devices have made them invaluable to most business users’ workday processes, they have also exposed their organizations to three enormous risks: data loss, data theft and malware propagation. Learn how removable device policy enforcement can mitigate these risks while enabling managed use of these necessary productivity tools.
Medical Records on the Run: Protecting Patient Data with Device Control and Encryption
The convenience of putting medical records online enables healthcare professionals to provide more collaborative and knowledgeable care, but the more pervasive electronic health information becomes, the more of a risk it poses. Learn how to take advantage of the benefits of putting medical records online while effectively managing the risk.
The Great Balancing Act: Using USB Flash Drives in Government Environments
USB flash drives are a valuable tool in a government staffer’s virtual toolkit, but if left unmonitored they potentially introduce dangerous malware. Learn strategies for implementing a policy for secure USB use that will help prevent potential data loss, data theft, malware propagation and hacking.
MORE NEWSFEED >>>