Privacy as a Competitive Edge

September 25th, 2008

I discuss how privacy is a competitive edge for business in the next section from my article, “How to Use Privacy as a Business Differentiator” within my September issue of IT Compliance in Realtime Journal.
Download the PDF for a much nicer looking version…

Read the rest of this entry »

Privacy As A Business Differentiator

September 24th, 2008

Should you be concerned about maintaining the privacy of the personally identifiable information (PII) with which you’ve been entrusted…from your customers, employees and others…only because of the growing numbers of laws that require you to be concerned?
Do you do nothing with regard to privacy protections if you are not compelled by laws because you want to save the money it would take to put the protections in place?

Read the rest of this entry »

“Doing Well by Doing Good”

September 23rd, 2008

Here’s the next section from my article, “How to Use Privacy as a Business Differentiator” within my September issue of IT Compliance in Realtime Journal.
Download the PDF for a much nicer looking version…

Read the rest of this entry »

New HHS Guides For HIPAA Privacy Rule

September 22nd, 2008

Did you see that the Department of Health and Human Services (HHS) released some new guidance documents for the Healthcare Portability and Accountability Act (HIPAA) Privacy Rule compliance activities on September 17?
I need to go through them more thoroughly, but upon a quick scan they look like they contain some pretty good, and interesting, guidance information for both patients and healthcare providers…

Read the rest of this entry »

Tomorrow is “Secure Your ID” Day

September 19th, 2008

This morning I was listening to my usual favorite radio station and was somewhat surprised to hear a guest talk about how he was going to be at a local grocery store parking lot tomorrow to offer free shredding services to help raise awareness of identity theft and in observation of “Secure Your ID” Day…

Read the rest of this entry »

Obtaining Support and Funding from Senior Management

September 18th, 2008

Throughout the late spring and summer months I had the great opportunity to participate in an talented workgroup sponsored and led by the European Network and Information Security Agency (ENISA) to create a new, and quite valuable, resource for information security practitioners to help them obtain funding and sponsorship for the training and awareness programs.

Read the rest of this entry »

How to Use Privacy as a Business Differentiator & To Maintain Trust

September 16th, 2008

A recent news report from New Zealand, “Safety of personal info worries Kiwis” highlighted how business safeguards and privacy practices impact customer trust, and subsequently retention.
A recent New Zealand Privacy Commissioner survey found, among other things:

Read the rest of this entry »

A $1 Billion Access Control Mistake

September 15th, 2008

It has been widely reported and blogged about how an old United Airlines story was posted with huge stock value loss…

Read the rest of this entry »

Miscellaneous Cybercrime & Privacy Tidbits

September 12th, 2008

For the last day of Global Security Week (GSW) I’m providing a few items that relate to cybercrime that I find interesting…

Read the rest of this entry »

Today We Remember

September 11th, 2008

Today is day 4 of Global Security Week (GSW). It is in memory of this sad and tragic day in 2001 that the spirit and concept of GSW was created.
This is why GSW is held during the week leading up to 9/11 each year; to reflect, remember, learn, and work to raise awareness of all security issues and help to prevent bad things, of all types, from occurring, and to ensure such a tragedy does not happen again.
Sadly too many other terrorists attacks HAVE occurred, and continue to occur, since throughout the world…

Read the rest of this entry »