Posts Tagged ‘awareness and training’

Educational Security Incidents Year in Review 2007

Thursday, February 21st, 2008

Since I’m talking about “The Anatomy of a Privacy Breach” at Berkeley today, I thought it would be timely to point out a great resource that details the very many privacy breaches that occur within colleges and universities.

(more…)

The Anatomy of a Privacy Breach

Wednesday, February 20th, 2008

Today I’m flying from the very frigid sub-zero temps of Iowa out to the University of California at Berkeley. I was invited to give a lecture, and considering the ongoing increase in privacy breaches, I chose to talk about “The Anatomy of a Privacy Breach.”

(more…)

Insider Threat: Ex-Employee Takes Files To New Employer

Tuesday, February 19th, 2008

Here’s a good article for your files, and to point out to your legal counsel to point out the very real insider threat to information security and privacy…
A Massachusetts trial court recently ruled that the unauthorized transfer of electronic files is actionable as a conversion under Massachusetts’ common law.

(more…)

Have You Looked In Your Trash Bins Lately?

Monday, February 18th, 2008

It shouldn’t still amaze me, but it does, how often so many organizations just dump huge amounts of printed paper containing tons of personally identifiable information (PII) right into their dumpster sitting behind their building, in the alley, or some other easily reachable public location.
Here’s yet another example of a business throwing away people’s privacy in their trash dumpster…

(more…)

Identity Theft #1 Consumer Fraud Complaint To FTC in 2007

Friday, February 15th, 2008

This week the FTC released the list of the top 20 consumer fraud complaints they received in 2007.
Not surprisingly, identity theft topped their list, accounting for 32% of all the complaints.

(more…)

New Best Practices Guide For Building Secure Software

Thursday, February 14th, 2008

Many information security incidents and privacy breaches occur as a result of exploiting vulnerabilities in poorly engineered applications and systems.
It is good to see more articles and information about how to build security into applications from the very inception of a project, and continue it through the entire applications and systems lifecycle.

(more…)

Phisherthieves Like Banks Best

Wednesday, February 13th, 2008

Here’s a pretty good mainstream news story from CNN to give to your business leaders to raise their awareness and understanding about phishing…

(more…)

$54 Million Lawsuit Against Best Buy For Losing Laptop

Wednesday, February 13th, 2008

I knew the civil suits for lost laptops would start soon. Thanks so much to my buddy Alec for pointing out this story to me!
Raelyn Campbell took a laptop computer to Best Buy to get fixed, and three months later, after giving Campbell the run-around, Best Buy admitted to her that they lost the computer.

(more…)

Give a Hoot, Don’t Privacy Pollute!

Tuesday, February 12th, 2008

I just saw a term that can be used really well with non-technical folks, “data pollution.”
I wish I had thought of that term!

(more…)

Potty Pics Poo-Poo Privacy

Tuesday, February 12th, 2008

This is a sad example of how others take it upon themselves to invade the privacy of others and don’t understand that they’re doing anything wrong…

(more…)