Dave Jevans, chairman of IronKey and the Anti Phishing Working Group, looks at why locking down internal systems is not enough to combat sophisticated cyber criminals.

Although the threat from cyber criminals has existed for decades, the sheer volume of successful attacks on high profile brands during the last six months has highlighted an urgent need to protect against data breaches.
Having read a recent Gartner blog which stated that many of the of the IT security improvements they’ve seen over the past five years are fast becoming obsolete in the face of more sophisticated cyber attacks, turning the tables on the bad guys won’t be easy. Read more…
Like this:
One blogger likes this post.
An effective backup strategy takes equal account of both perspectives.

Companies generally pursue two different directions when it comes to strategies concerning the backup and recovery of their data. While disaster recovery strategies, on the one hand, are directed towards protecting the whole system, by contrast the area of data protection addresses individual data. An effective strategy takes equal account of both perspectives.
Small and medium-sized companies can gain more flexibility through integrated solutions, which unite disaster recovery and data protection.
Read more…
Like this:
Be the first to like this post.
by By Pete Lamson, E-Commerce Times

The cloud is increasing the effectiveness of small businesses. For example, companies are calling on efficient Web-based services and applications to manage such critical tasks as accounting, customer relationship management, document creation and communication. In addition, cloud storage can simplify a company’s data-protection process in a number of ways.
Many small-business owners may not realize that the cloud plays a big role in their business operations, and its importance is growing every day. I’m often asked, “What exactly is the cloud, and why does my company need it?” Simply put, the cloud hosts resources and applications that are accessed through the Internet, and it now offers small businesses access to powerful capabilities that once were only within reach of larger corporations.
Like this:
Be the first to like this post.
Are you worried that the message about information and records management is not getting through to your colleagues? Do you spend your time devising strategies to encourage use of the corporate EDRMS but find its falling on deaf ears? Is email management or the lack of it causing sleepless nights? If you answered yes to any of the above, then relax, you’re not alone. An IDM survey of Australian and New Zealand records and information managers has found some common concerns at the top of everybody’s list.
While there are many difficult technical challenges to be overcome in implementing an electronic document and records management system (EDRMS), the survey found Australian and New Zealand organisations finds the major perceived challenge comes from end users resistant to change.
Submissions were received from a wide range of over 250 public and private sector organisations, with many at differing stages of the path to digital records management.
Read more…
Like this:
Be the first to like this post.
Employees are much more willing to steal the information stored in records management systems than organizations may have thought.
New research by Harris Interactive of 3,400 employees in the US, UK and Australia found that a significant proportion of them would be happy to do something with their employer’s or client’s private data.
A staggering staggering 48 per cent of Brit, would feel comfortable using private or sensitive information, compared to just under a quarter of Americans , and a 29 per cent of Australians. Read more…
Like this:
Be the first to like this post.
Data is an asset — and a risk, which is why companies are starting to pay more attention.
Employees are producing records at a record pace in the form of emails, instant message chats, spreadsheets, documents and reports. Those records are posing a challenge for companies as they run out of disk storage and are forced to decide what to save, what to toss, where to store and how to create a formal policy that manages records while meeting compliance standards.
To do that, record management is becoming a group effort among the legal, compliance, IT and records management offices. Read more…
Like this:
Be the first to like this post.
Controversial legislation to require Internet providers to store logs about their customers for 18 months has run into an unexpected obstacle: a former supporter.
“This bill needs a lot of fixing up,” Rep. F. James Sensenbrenner, a Wisconsin Republican and previous chairman of the House Judiciary committee, said at a hearing today. “It’s not ready for prime time.”
The bill in question is H.R. 1981, which says Internet providers must store for “at least 18 months the temporarily assigned network addresses the service assigns to each account,” unless it’s a wireless provider like AT&T, T-Mobile, or Verizon. Read more…
Like this:
Be the first to like this post.
Reports of data breaches and malicious attacks on companies have been rife and now outsourcers are scrambling to reassure their clients, according to PricewaterhouseCoopers (PwC).
It has become vital for companies which provide administration and data services to other businesses to explain how they operate and protect their services to establish and maintain credibility.
According to PwC, an increasing number of outsourcers are working to reassure their stakeholders through an independently assured report that all their processes are robust and client data is safe.
These third-party service organisations are looking to stimulate greater trust among their clients through increased transparency in their controls and turn this into competitive advantage, said PwC.
Read more…
Like this:
Be the first to like this post.
Brussels – The views of telecoms operators, Internet service providers, Member States, national data protection authorities consumer organisations and other interested parties are being sought by the European Commission on whether additional practical rules are needed to make sure that personal data breaches are notified in a consistent way across the EU. The revised ePrivacy Directive (2009/136/EC), which entered into force on 25 May 2011 as part of a package of new EU telecoms rules, requires operators and Internet service providers to inform, without undue delay, national authorities and their customers about breaches of personal data that they hold (see IP/11/622 and MEMO/11/320). The Commission wants to gather input based on existing practice and initial experience with the new telecoms rules and may then propose additional practical rules to make clear when breaches should be reported, the procedures for doing so, and the formats that should be used. Contributions to the consultation are welcome until 9th September 2011. Read more…
Like this:
3 bloggers like this post.
Categories: Breach Risk, Data Breach Legislation, Digital Preservation, Electronic Records, European Commission, Internet, Legal, personal data online, Records Management, Records Storage
Tags: European Commission, Neelie Kroes, personal data breaches