Tag Archives: security
Failure To Encrypt Data May Lead To Serious Data Breaches And Hefty Fines
Organizations have to undertake a serious review of the way they handle data or the level of security of their information network. A school’s ignorance of the need to encrypt mobile and portable devices has led to a breach of the Data Protection Act, after a laptop was stolen from a teacher’s car, the Information Commissioner’s Office has found.
Freehold Community School in Oldham was said to have broken data laws when the unencrypted device containing personal information on 90 pupils was stolen from the car parked at the teacher’s home. Enquiries from the ICO found the school was not aware of the need to encrypt such devices. A school policy informing staff that storage devices should not be kept in cars away from school premises was however in place.
“The fact that the school was unaware of the need to encrypt the information stored on their laptop shows that many organizations continue to process personal information without having the most basic of security measures in place,” said Sally-Anne Poole, the ICO’s acting head of enforcement
Virgin Media Limited is an example of a large organization to be held to account for a breach of the UKs Data Protection Act 1998 (DPA). The breach seems to have occurred following the loss of a compact disc that was passed to Virgin Media by Carphone Warehouse. The disc contained personal details of various individuals’ interest in opening a Virgin Media Account in a Carphone Warehouse store.
Virgin Media was required, with immediate effect, to encrypt all portable or mobile devices that store and transmit personal information. Further, the company is to ensure that any service provider processing personal information on its behalf must also use encryption software and this requirement has to be clearly stated in all contracts.
Over the past years laptops (Marks & Spencer), DVDs (HM Revenue and Customs), and memory sticks (PA Consulting) have all gone astray, with the potential loss of thousands of records.
Recently, the Ponemon Institute surveyed 275 European organizations in its latest lost laptop report to determine the economic consequences of having a laptop lost or stolen. It was found that participating organizations lost over 72,000 laptops during a 12-month period for a total economic impact of $1.79 billion, according to the “The Billion Euro Lost Laptop Problem” report, released in April. The researchers calculated that on average, each laptop loss cost participating organizations about $6.85 million in 2010.
The European study complemented the earlier Ponemon Institutes December study which surveyed 329 organizations in the United States about laptop loss. Respondents lost more than 86,000 laptops over the course of a year, according to “The Billion Dollar Lost Laptop Study.” The report valued the total cost at $2.1 billion at the time.
When the resulting losses from the European study are combined with the US study, the total damages ballooned to $3.9 billion across almost 160,000 lost laptops in the space of one year. Only 34 percent of lost laptops were encrypted, 26 percent were backed up regularly, and seven percent had other anti-theft features enabled, according to the European report. There were other similar trends in the European and US studies. Both reports found that roughly 30 percent of the lost laptops contained confidential data that was not encrypted.
Organizations have to pay more attention on data policies, and have a proficiently skilled IT security workforce in order to avoid cyber attacks and security breaches. IT security professionals can increase their information security knowledge and skills by embarking on advanced and highly technical training programs. EC-Council has launched the Center of Advanced Security Training (CAST), to address the deficiency of technically proficient information security professionals. CAST will provide advanced technical security training covering topics such as Advanced Penetration Testing, Digital Mobile Forensics, Advanced Application Security, Advanced Network Defense, and Cryptography, among others. These highly sought after and lab intensive information security training courses will be offered at all EC-Council hosted conferences and events, and through specially selected authorized training centers.
Good Quality Security Safes For Maximum Protection
By using appropriate security safes, one can live a life free of tension regarding his belongings. There are many kinds of safety lockers that people can install to ensure that their precious possessions are safe and close at hand.
High Standard Locking System Essential
One can choose from different sizes and designs of wall and floor safety vaults as per their requirements and budget. Such home safes can be installed easily. These have modern electronic locking systems which makes burglary impossible. Also, the vaults are made of thick metal which cannot be broken easily. Home owners can install such lockers on the wall or on the floor as desired.
One can check out different kinds of security safes on the internet where there are several websites which deal in such security items. It is a good idea to install a wall safe of a suitable size and place a painting over it to shield the safe. In case of floor safes, one can place a carpet over it to prevent it from being detected easily. Home owners can check out different sizes and designs and choose one according to budget and size.
Reliable manufacturers of safety vaults provide the guarantee that their lockers can prevent the contents from fire for a certain amount of time.
Depending on the requirement, the owner can opt for lockers which provide safety from fire for up to one or two hours. Reputed manufacturers also use the latest locking systems in their security safes. This prevents expert burglars from breaking open the safe even after detecting it.
Modern safety vaults use electronic locking systems which cannot be duplicated. Only after entering the required code can the owner open the vault and access the contents.
It is a good idea to check out the websites of different manufacturers of safety vaults. Reputed sites display the various designs available along with their cost and features. Depending on the size required, the home owner can opt for a floor or a wall locker which has a secure locking system and also offers adequate protection from fire.
Clarify Doubts about Safety Features
It is essential for business owners to install appropriate safes in their offices to keep their important documents safely. Such lockers should ideally provide maximum protection from fire so that in case of an emergency, there is enough time to save the documents. Business owners who deal in valuable items like jewellery should opt for floor safety vaults which have strong metal bodies and high standard locking systems to protect the contents from burglary. After short listing appropriate security safes, it is a good idea to contact the manufacturer and clarify all the details regarding the safety vaults.
Generally, the contact details are available on the websites of reputed dealers. It is also important to visit the manufacturer’s showroom and check out the vault in person before making any payment. Since such security items are installed to keep one’s precious belongings, it is essential to be completely sure about the safety features. Reputed manufacturers also provide experts to install the vault at the desired location.
By installing appropriate security safes, the owner can stay free of tension regarding his precious possessions.
Failure To Encrypt Data May Lead To Serious Data Breaches And Hefty Fines
Organizations have to undertake a serious review of the way they handle data or the level of security of their information network. A school’s ignorance of the need to encrypt mobile and portable devices has led to a breach of the Data Protection Act, after a laptop was stolen from a teacher’s car, the Information Commissioner’s Office has found.
Freehold Community School in Oldham was said to have broken data laws when the unencrypted device containing personal information on 90 pupils was stolen from the car parked at the teacher’s home. Enquiries from the ICO found the school was not aware of the need to encrypt such devices. A school policy informing staff that storage devices should not be kept in cars away from school premises was however in place.
“The fact that the school was unaware of the need to encrypt the information stored on their laptop shows that many organizations continue to process personal information without having the most basic of security measures in place,” said Sally-Anne Poole, the ICO’s acting head of enforcement
Virgin Media Limited is an example of a large organization to be held to account for a breach of the UKs Data Protection Act 1998 (DPA). The breach seems to have occurred following the loss of a compact disc that was passed to Virgin Media by Carphone Warehouse. The disc contained personal details of various individuals’ interest in opening a Virgin Media Account in a Carphone Warehouse store.
Virgin Media was required, with immediate effect, to encrypt all portable or mobile devices that store and transmit personal information. Further, the company is to ensure that any service provider processing personal information on its behalf must also use encryption software and this requirement has to be clearly stated in all contracts.
Over the past years laptops (Marks & Spencer), DVDs (HM Revenue and Customs), and memory sticks (PA Consulting) have all gone astray, with the potential loss of thousands of records.
Recently, the Ponemon Institute surveyed 275 European organizations in its latest lost laptop report to determine the economic consequences of having a laptop lost or stolen. It was found that participating organizations lost over 72,000 laptops during a 12-month period for a total economic impact of $1.79 billion, according to the “The Billion Euro Lost Laptop Problem” report, released in April. The researchers calculated that on average, each laptop loss cost participating organizations about $6.85 million in 2010.
The European study complemented the earlier Ponemon Institutes December study which surveyed 329 organizations in the United States about laptop loss. Respondents lost more than 86,000 laptops over the course of a year, according to “The Billion Dollar Lost Laptop Study.” The report valued the total cost at $2.1 billion at the time.
When the resulting losses from the European study are combined with the US study, the total damages ballooned to $3.9 billion across almost 160,000 lost laptops in the space of one year. Only 34 percent of lost laptops were encrypted, 26 percent were backed up regularly, and seven percent had other anti-theft features enabled, according to the European report. There were other similar trends in the European and US studies. Both reports found that roughly 30 percent of the lost laptops contained confidential data that was not encrypted.
Organizations have to pay more attention on data policies, and have a proficiently skilled IT security workforce in order to avoid cyber attacks and security breaches. IT security professionals can increase their information security knowledge and skills by embarking on advanced and highly technical training programs. EC-Council has launched the Center of Advanced Security Training (CAST), to address the deficiency of technically proficient information security professionals. CAST will provide advanced technical security training covering topics such as Advanced Penetration Testing, Digital Mobile Forensics, Advanced Application Security, Advanced Network Defense, and Cryptography, among others. These highly sought after and lab intensive information security training courses will be offered at all EC-Council hosted conferences and events, and through specially selected authorized training centers.