Community Corner
Ex-DOR Official: 'Data Security Was Not a Priority'
Testimony portrays a department that did not protect citizens' information
During testimony before a House Committee the former head of data security for the South Carolina Department of Revenue (SCDOR) said that his recommendations to protect the private information of citizens were often ignored.
Scott Shealy told the bi-partisan group that in his opinion data security was "not a priority" at SCDOR.
During his nearly hour-long testimony, Shealy said that he believes former SCDOR Director Jim Etter, who was forced to resign last month, was the "fall guy" for the breach and believes that the real culpability for the breach belongs to Michael Garon, the former Chief Information Officer (CIO). Garon resigned over the summer, just weeks prior to the breach being disclosed.
Find out what's happening in Columbiafor free with the latest updates from Patch.
See all of Patch's coverage of the SCDOR hack HERE.
Shealy was hired in 1997 and reported to Garon. He left his position in 2011 because, "I felt I was unable to perform my job function because I did not have the support of my CIO."
Find out what's happening in Columbiafor free with the latest updates from Patch.
The fact that data security was put under the responsibility of the CIO was, according to Shealy, a signal that the SCDOR was not serious about security. Shealy said that having a CIO in charge of data security was akin to "the fox guarding the henhouse."
Shealy said that Etter was charged with working with the Legislature and the Deputy Director, Harry Cooper, was in charge of day-to-day operations at SCDOR. Shealy spoke highly of both Etter and Cooper and said that he was disappointed when he learned of the breach and that Etter was being assigned the blame.
Speaking with the media after his testimony, Shealy said that morale among the tech security staff was very low and that all of his co-workers were concerned about thelack of attention to security. After Shealy left SCDOR his group was disbanded and transferred within the SCDOR.
Shealy now works in data security for the Judiciary Department.
Perhaps the most alarming statement made during Shealy's session with the media was his belief that the SCDOR was among the best protected departments.
Keep up with all of Patch's coverage of South Carolina politics by following us on Facebook HERE and Twitter HERE.
Get more local news delivered straight to your inbox. Sign up for free Patch newsletters and alerts.
