It’s interesting that the ChoicePoint CISO feels the need to point out that they haven’t been hacked, but were defrauded in a way that happens every day. So, ChoicePoint is not responsible for protecting against the most common threats, or is it just that the CISO’s position isn’t responsible for it at ChoicePoint?

Here’s a previous entry on this matter.