NEW: Another #FOIAFriday @business SCOOP
A previously undisclosed FTC-ordered audit of Twitter’s privacy & data controls missed failures later exposed by a whistleblower--raising q's about oversight of major tech platforms
By @leah_nylen & me
bloomberg.com/news/articles/…
A previously undisclosed FTC-ordered audit of Twitter’s privacy & data controls missed failures later exposed by a whistleblower--raising q's about oversight of major tech platforms
By @leah_nylen & me
bloomberg.com/news/articles/…
The 2021 external audit, obtained by Bloomberg News in response to a #FOIA request, concluded that the company had appropriate safeguards. Months later, the company’s cybersecurity chief had left and alleged that Twitter’s practices were marred by “egregious deficiencies.”
Ernst & Young certified that Twitter’s information security program was appropriate for the company’s size and that its “security controls meet or exceed the protections required” by the FTC's 2011 consent decree
Twitter’s ex-head of cybersecurity, Peiter Zatko, filed a complaint and testified before Congress earlier this year saying that the company was a “ticking bomb of security vulnerabilities.”
Much of the 2021 audit, which covers the period from Sept. 13, 2019 to Sept. 12, 2021 is redacted. A rep for Zatko said he couldn’t comment on whether he was among those interviewed as part of the audit because he is legally barred from discussing his whistleblower complaint
• • •
Missing some Tweet in this thread? You can try to
force a refresh
