Global Security Watch > Encrypt Data or Invite Disaster
[InfoSec News Blog] This is not to say that encryption is a silver-bullet, but it goes a long way to securing your data. If Citigroup encrypted their data, 4 million consumer records, stored on magnetic computer tapes, would have been protected.
Some related posts from Technorati and Google.
[InfoSec News Blog] CardSystems: Shouldn't Have Kept Records: I advise banks to develop an incident response plan for electronic and social engineering attacks but perhaps we should include in this "data theft". They should have a clear course of action thought out before hand so they don't do things as silly as closing out your account preventing you from covering your other expenses.
[Www2.csoonline.com] Customer Data Lost, Citigroup Unit Says - Security Feed - Blog ...: The Washington Post reports that the announcement from CitiFinancial, a subsidiary that provides personal and home equity loans, pushes to more than 6 million the number of U.S. consumers whose personal data have been lost or stolen in just the past six months. The spate of breaches has included federal agencies, universities, banks and other financial institutions, data brokers and data-storage companies.
[Blog.inc.com] Fresh Inc.: In February, Bank of America lost data on 1.2 million federal workers, and in May, Time Warner reported losing tapes containing critical information on 600,000 current and former workers. In the last six months, 6 million consumers have had their personal data "misplaced" or stolen from major corporations, according to today's story on the Citigroup loss in the Washington Post.
[Markearnest.net] Mark Earnest::Mark Earnest's Weblog - Technology, Security ...: I used to think it was bad that the TSA has become the incompetent schoolyard bully of the airline industry (papers, please) and that you could no longer purchase a plane ticket with otherwise valid US currency (you have to use something government can trace, they prefer credit cards since they can be traced AND they help you keep that healthy American debt). Now if you even TRY to buy a plane ticket with cash, not only will you not get it, they will legally steal your money since only drug dealers carry money.
[Schneier.com] Schneier on Security: Public Disclosure of Personal Data Loss: While I do think companies are responsible for third parties who handle their data, knowing that you can't even trust the mails makes things very difficult for them. Backup tapes should be encrypted, yes, but there are many situations where electronic data usually isn't encrypted -- desktop workstation hard disks, for example.
[Compliancepipeline.com] Compliance Pipeline | Security: Ingrian DataSecure Platforms offer granular encryption, seamless integration, and centralized security management. Combat data theft--with unprecedented ease and cost effectiveness.
Reflected tags on Technorati: Blog, Encryption, Global Security Watch