Network Users Make the Difference in Data Security

6/25/2010

A data breach can occur many ways. Even a data “warehouser,” who has implemented a policy to minimize data collection and retention while making necessary data accessible in a secure environment, may still be subject to a data breach. A data breach may still occur by accident or through malice even when a well written policy and procedure is adhered to seriously by computer users. Data is only as safe as the trustworthiness and reliability of the organization’s users.

The Enemy in the Office: Part 3

5/07/2010

Ten tips for fax safety

As we discussed in the last two posts in this series, you can see how even mundane office equipment can pose a serious security risk. Part of the security battle here is simply understanding the issue, because the technology already exists to help you erase your fax or copier hard drive. So, are you safeguarding against what amounts to pure error?

As it turns out, there are several steps you and your staff can take to reduce the risk of misdirected faxes:

The Enemy in the Office: Part 1 (of 3!)

5/04/2010

Why your fax machine may be your worst security risk

Last week, a data breach made headlines in Canada, when a woman’s private medical information was faxed by her doctor’s office to a newspaper. It was no doubt a mistake; a simple case of a wrong number. The laws of probability assure it will happen from time to time, but unfortunately, this type of breach becomes more insidious when you look at the details. In some instances, it is hundreds of records that are faxed over a multi-year time span. And in those cases, oftentimes the doctor’s offices and government entities knew of the problem, but still took years to correct it.

An example of why consumers must be careful about sharing personal information . . .

5/04/2010

Going back to our April 30th blog post . . . Back when I was just starting to learn about id theft and protecting my PII, I applied for a Hollywood Video rental membership. The application asked for my Social Security number. I asked why they needed it; the clerk couldn’t tell me. I didn’t list it and I still obtained a membership. The store at which I applied is now closed and stories have appeared about the irresponsible disposable of the records by other stores. So, how happy am I now that I didn’t give that piece of PII on the application. I tell this to the students when we present the CSR program—be stingy with personal information.

Tip #4: Audit company financials as frequently as consumers do.

1/07/2010

A fundamental tenet of consumer security is reviewing credit reports.  Kroll advises every consumer to perform periodic reviews of their credit reports (no less frequently than every quarter). By doing so, a consumer is better able to spot suspicious activity and potentially lessen the damage to his or her financial identity.