SEARCH RESULTS
 
Showing 1-10 of 215 records
 
Expand article

Laptop stolen from Workers Compensation Fund auditor

The Article has images
2008-01-03 11:25:59 by Evan Francen in The Breach Blog
...additional levels of password protection Evan] I wonder how many auditors this entails. Additional levels of password protection could add more risk by increasing a user's chances or writing passwords down. In a recent security audit we found that 20% (13 of 65) of one company's field laptop users were writing passwords down on Post-It notes...
 
 
 
 
 
Expand article

Stockport Primary Care Trust flash drive goes missing

The Article has images
2008-01-21 09:44:46 by Evan Francen in The Breach Blog
...additional controls such as encryption must be prohibited. This is accomplished through policy, training and awareness, standards and procedures, and technical controls. The fact that this statement is made by Stockport PCT demonstrates a fundamental mis-understanding on information security roles and responsibilities Indeed the security of...
 
 
 
 
 
Expand article

IT Vendor VAR Relationships 101

2008-05-31 20:52:07 by JJ in Security Uncorked
 
...additional discount to a specific product line or type. Other times the Distis may be offering a volume discount or bundles. Sometimes the incentives are for the Reseller, and some times theyre designed to pass through to the Customer. Its a good idea to just ask your Reseller if there are any additional discounts that could be applied...
 
 
 
 
 
Expand article

Do you trust the merchants to protect your credit cards?

2007-12-11 09:01:26 by Khalid Kark in Security & Risk Management
 
...additional security measures in place. Merchants would need to retain a non-sensitive (and useless to identity thieves) transaction/approval numbers, rather than very sensitive cc numbers and identifying info. This would significantly reduce the risk of the security breaches, which is the ultimate goal of PCI The opponents of this proposal...
 
 
 
 
 
Expand article

Making Risk Measures Agree with Accounting 100%

2006-12-26 05:27:00 by Jomni in Risk Management Quant
 
...additional cost justifiable given that additional benefit is only to reconcile a few dollars and cents? Probably not today but probably (and hopefully) in the near future when hardware specs get better while prices get cheaper Tags: accounting finance risk measurement software
 
 
 
 
 
Expand article

Duke School of Law breach affects 3,200

The Article has images
2007-12-06 11:37:20 by Evan Francen in The Breach Blog
...additional audit and review that should have been conducted regularly all along. Unfortunately, there are people affected already What has been done to secure the web site and prevent this from happening again Over the weekend, we moved the site off our web server to allow us to install a completely new operating system and new software....
 
 
 
 
 
Expand article

Some Massachusetts seniors are at risk

The Article has images
2007-12-04 16:17:26 by Evan Francen in The Breach Blog
...additional security measures might be required Comfyllama] If data leaked, then I would say that additional security measures are probably required. Sounds obvious, but to some it just doesn't sink in The data breach did not affect all members of the program, Goodwin said Comfyllama] I wonder how this conclusion is drawn? If the breach does...
 
 
 
 
 
Expand article

Lloyds TSB warning may panic some customers

The Article has images
2008-01-05 00:47:26 by Evan Francen in The Breach Blog
...additional details and handle future incident responses with more thought. To give Lloyds TSB the benefit of doubt, maybe they are unable to disclose additional details because of law enforcement action. Still, customers are frustrated and some are scared Past Breaches Unknown
 
 
 
 
 
Expand article

Missing University of Akron portable hard drive

The Article has images
2008-01-14 11:33:26 by Evan Francen in The Breach Blog
...additional questions Notable Comment at the Akron Beacon Journal So this is what $20,000 gets you... a stolen identity. Who believes that this device was destroyed? Then they have the nerve to send me a letter asking for a donation Commentary It is not mentioned in the news story whether or not the University of Akron permits the storage...
 
 
 
 
 
Expand article

The Naval Surface Warfare Center warns employees

The Article has images
2008-01-16 09:51:41 by Evan Francen in The Breach Blog
...additional guidance on reporting and protecting against potential identity theft Current or former Navy civilian employees who have experienced recent identity fraud are urged to call this number as well as notify their local authorities Current employees were notified of the incident on Jan. 10 through an All Hands e-mail and urged to take...