Posts Tagged ‘FTC’

The World is Miffed About Spam & Phishing

Thursday, October 18th, 2007

Several weeks ago I got spam from an information security company about a seminar they are putting on. I did not respond; I wasn’t interested. Since that time I have received many messages, all with the same content, from various people from that organization, the tone of which really ticked me off. The following is an excerpt.

(more…)

New FTC Report Provides Organizations Good Guidance For Protecting PII

Tuesday, September 18th, 2007

Today the U.S. Federal Trade Commission (FTC) released a report, “Combating Identity Theft: Implementing a Coordinated Plan.”

(more…)

Would You Be More Inclined To Work For A Company That Gave You Identity Theft Insurance As A Benefit?

Monday, September 17th, 2007

Last year I had a couple of different identity theft insurance vendors contact me wanting me to endorse their products as they were trying to sell the packages to employers to offer to their employees as part of their total benefits packages.

(more…)

Your Name May Be Falling Off the Do Not Call List Soon!

Thursday, September 6th, 2007

I recently did a privacy impact assessment (PIA) for a marketing company and remembered that the U.S. Do Not Call list entries expire after 5 years! Most people do not realize this…did you know this?

(more…)

Privacy Initiatives Sincere Or Marketing Ploy?

Tuesday, July 24th, 2007

Yesterday San Jose Mercury News printed a story about how Yahoo, Microsoft and Ask are going to “limit” the personally identifiable information (PII) they collect online.

(more…)

New Social Engineering Scheme Targets Military Families

Monday, June 25th, 2007

Every week…sometimes daily…it seems there is a new type of social engineering attack targeting specific groups. The social engineering fraudsters are pretty creative and many adept at exploiting the vulnerabilities and weaknesses of these groups. They use face-to-face methods, phone calls, email messages, faxes, and any other communication path that could take them to a willing victim.

(more…)

Information Security: Laws Require Secure Disposal of Information in All Forms; Using BS 8470:2006 for Compliance

Friday, April 20th, 2007

Many information security incidents have occurred through non-technical means by simply and thoughtlessly throwing away printed documents into publicly-accessible trash bins, or even putting computers and sensitive documents out on the streets. I have blogged about this several times, such as here, here, and here.

(more…)

SMBs, Identity Theft & Insider Threat: Bad SMB Security Impacts Organizations of All Sizes

Wednesday, April 18th, 2007

There are many articles written about the insider threat, several have been done, and often the focus is on large organizations where those employees with malicious intent are often either in positions of trust way down in the org chart, or the perpetrator is the person at the helm of the organization.

(more…)

Privacy Act: FTC Proposes Allowing Disclosure of PII Records to Third Parties To Assist Data Breach Response Within Gov’t Agencies

Tuesday, April 3rd, 2007

On March 29 the FTC published a proposed new routine use, (72 Fed. Reg. 14814, 3/29/07), that would allow FTC records governed by the Privacy Act to be disclosed to “appropriate” persons and entities when reasonably necessary to respond and prevent, minimize, or remedy harm resulting from a U.S. government agency data breach or compromise.

(more…)

Most U.S. Government Agencies Still Not E-FOIA Compliant 10 Years Following Enactment; Disregard for Laws Also Leads to Disregard for Security Requirements

Wednesday, March 21st, 2007

On March 12 the National Security Archive at George Washington University issued their report, “The Knight Open Government Survey 2007.”
Basically the study looked at how many of the 149 U.S. government agencies they surveyed were in compliance with the provisions of the Electronic Freedom of Information Act (EFOIA) here at the 10 year anniversary of the Act going into effect.

(more…)