Friday, October 23, 2015

Does organizational practices translate to information security posture?

Theranos lab tests promises quicker and more accurate results with smaller blood drop samples which translate to lower cost, nearly 10 times lower.  But, a snag reported by the WSJ,
confirmed that the company is down to offering just one test using a few drops of blood and is performing the other more than 240 blood tests it offers consumers by using larger blood samples drawn with needles from patients’ arms.”
Moreover, its website modified statements around number of blood drops for test required and actual micro-vials needed.  Perhaps just a coincident but Theranos has responded.
FDA is investigating - though FDA approval not needed since its not externally manufactured equipment such as Siemens or Roche Diagnostics which Quest and Laboratory Corp. uses.  Millions in investments and partnerships including Walgreens (and touted by big names – Mr Biden, John McCain, Henry Kissinger) over the past year have casted some doubts.  Seems at best, a marketing disconnect as one official from the CMS (Centers for Medicare and Medicaid Services) eluted to.
Yet, there’s a matter of no published peer-reviews that compare its test which is traditional that case for this industry.  Additionally, the “company hasn't allowed independent experts to publicly assess its labs, citing the need to protect its intellectual property.”

What if intellectual property protection was also cited for denying IT security audit?
What correlation does industry peer-reviews and independent security due diligence have?

No comments:

Post a Comment