SEARCH RESULTS
 
Showing 1-10 of 45 records
 
Expand article

Simple oversight at TNS Infratest exposes participant information

The Article has images
2008-07-09 23:37:10 by Evan Francen in The Breach Blog
...oversight? There are a number of controls that could have reduced the risk of this occurring One a secondary note, but no less important in my opinion. It seems that people (in general) provide too much information willingly, without understanding what the risks could be. Personally, I rarely complete surveys that ask me for personally...
 
Tags: information, records, master data records, sensitive information, sensitive, information leaks, personal information, data, bank account information
 
 
 
 
Expand article

Security oversight may have enabled Countrywide breach

2008-08-04 00:00:00 by HASH0x8472ebc in Network World on Security
 
The man accused of stealing customer data from home mortgage lender Countrywide probably was able to download and save the data to an external drive due to an oversight by the company's IT department
 
Tags: customer data, external drive due, data, oversight, department, save, company, download
 
 
 
 
Expand article

IT Security Oversight May Have Enabled Data Breach

2008-08-11 07:30:38 by Editor in Computerworld Security News
 
A former employee accused of stealing customer data from Countrywide Financial may have been able to download the information to a thumb drive because of an IT security oversight
 
Tags: security oversight, customer data, thumb drive, countrywide financial, employee, information, download
 
 
 
 
Expand article

PCI council sharpens oversight of security auditors

2008-11-17 00:00:00 by Ellen Messmer in Network World on Security
 
The PCI Security Standards Council introduces plan to sharpen oversight of qualified security assessors and approved scanning vendors
 
Tags: oversight, security assessors, vendors
 
 
 
 
Expand article

House committee issues report and finds fault with TSA web site

The Article has images
2008-01-15 09:35:53 by Evan Francen in The Breach Blog
...Oversight and Government Reform report titled INFORMATION SECURITY BREACH AT TSA: THE TRAVELER REDRESS WEBSITE In October 2006, the Transportation Security Administration launched a website to help travelers whose names were erroneously listed on airline watch lists. This redress website had multiple security vulnerabilities: it was not...
 
Tags: tsa, website, website contract, traveler redress website, tsa moved quickly, security breach, information security breach, security vulnerabilities, multiple security vulnerabilities
 
 
 
 
Expand article

Daniel Solove on the New FISA Law

2008-07-14 12:08:40 by schneier in Schneier on Security
 
...oversight, and also with very minimal legislative oversight. Most citizens know little about what is going on, and it will be difficult for them to find out, since everything is kept so secret. Secrecy and accountability rarely go well together. The telecomm lawsuits were at least one way that citizens could demand some information and...
 
Tags: minimal legislative oversight, oversight, law, ensure accountability, accountability, minimal oversight, congress, accountability rarely, legislative
 
 
 
 
Expand article

Ask the Auditor: Who is Responsible for Information Security?

2007-12-29 06:24:50 by Editor in Security Links
 
...oversight controls, all of which should be reviewed or tested to ensure they are (a) adequate, as defined to mitigate information security risks, and (b) reasonably effective in practice Finally, executive management must provide leadership to ensure that information security efforts are supported and understood across the organization....
 
Tags: information, information security, information policy, information security risks, information assurance, information security governance, information security managers, information security management, assign information security
 
 
 
 
Expand article

Risk ROI for Some Provisioning Solutions

2008-04-19 02:22:29 by Erik T. Heidt in Art of Information Security
 
...oversight capabilities that can be had All provisioning solutions provide some facilities for Reduction of paper-based processes in favor of electronic requests and work flows Reduction of manual updates in favor of automated entitlement updates All provisioning solution providers strive to have a compelling story for these items....
 
Tags: information security, information, entitlement, entitlement lifecycle, solutions, systems, risk roi, information security podcast, identity
 
 
 
 
Expand article

Rampant FBI Abuse of Power Now Paperwork Free

2007-03-20 23:53:00 by Eric Marvets in The Security Samurai
 
...oversight, now they dont even have agency oversight Sickening
 
Tags: fbi, paperwork, fbi suspects, improper paperwork, data, receives data, fbi improperly, file follow-up paperwork, counsel directs agents
 
 
 
 
Expand article

FISMA Report Cards IssuedResponse is Rote by Now

The Article has images
2008-05-21 15:36:29 by rybolov in The Guerilla CISO
...Oversight and Government Reform . Tom Davis is the representative from Northern Virginia and is the sponsor for FISMA back when it was signed. Until the last election, he was the chairman of the House Committee on Oversight and Government Reform. The committee is now chaired by Henry Waxman Time for a new concept in your vocabulary: LGOPP...
 
Tags: report, fisma,