Crims at vendors could crock kit says ENISA

Before you sign on the dotted line to acquire some kit or sign up a service provider, ask the vendor you're considering if any of their staff have criminal records. That's just one of many, many, suggestions made by the European Union Agency for Network and Information Security (ENISA), in a new guide to Secure ICT Procurement …

[Anonymous Coward]

Wilkommen zum 1984 !

Do they also want if I'm gay, jewish, stole candy when I was 5 and posted rants on "El Reg"?

[Simon Sharwood, Reg APAC Editor]

Re: Wilkommen zum 1984 !

Your rants have been noted ;-)

Just kidding.

Really.

[Alfred 2]

Doesn't this conflict with the Rehabilitation of Offenders Act?

Just asking ...

[Warm Braw]

As the staff at GCHQ work under a "strict legal and policy framework", I presume one should choose the vendor with the closest links to that august body if one is concerned with the security of one's IT systems.

[David Pollard]

Repentant sinners?

The ones that know how to avoid getting caught cause much worse problems.

[Aitor 1]

This is illegal in Spain

And should be illegal everywhere.

[Christoph]

So you make sure that the kit as shipped from the vendor is clean.

And by the time it arrives at your premises it is stuffed full of NSA spyware.

[xerocred]

Everybody at Huawei are certified clean

That should satisfy GCHQ.