Archive for the ‘Mobile Security’ Category

The cost to business of data breaches

Symantec_Logo-705671The UK has recently seen a increase number of cases where data protection and security has been breached. This has resulted in huge financial losses in addition to public embarrassment caused when the news comes to the surface.

Research by the Ponemon Institute found that the average total cost per incident was more than £1.4 million. The “2007 Annual Study: U.K. Cost of a Data Breach” also reveals that the financial impact of lost business due to reduced consumer trust was the most significant component of data breach costs. This first-annual U.K. study was sponsored by PGP Corporation and Symantec.

The report released today focuses on the cost of activities resulting from actual data loss incidents as well as identifying the most frequent causes and likely technology responses to a data breach. Breaches included in the survey ranged from 2,500 to more than 125,000 records from 21 U.K. businesses spanning eight different industry sectors. Among the key findings:

* The average total cost of a data breach ranged from £84,000 to almost £3.8 million, with an average of £47 per record compromised;

* 36 percent of reported costs were due to lost business, with an abnormal customer churn rate (higher than average) of 2.5 percent after a breach;

* The cost of a data breach for financial services organisations was more than 17 percent higher than average, at £55 per record compromised;

* 38 percent of respondents reported breaches by third-party organisations, such as outsourcers, consultants and business partners, at a significantly higher cost per record compromised and,

* 36 percent of data breaches resulted from lost and stolen laptops or other mobile devices.

Survey respondents identified encryption and data loss prevention solutions as the top two technology responses following a data breach, indicating that U.K. organisations increasingly understand the benefits of deploying enterprise data protection to defend data against future breaches.

“This study establishes a first of its kind benchmark for organisations in the U.K. to calculate the risk and potential monetary consequences of a data beach,” said Larry Ponemon, Chairman and founder of The Ponemon Institute. “Businesses and government in the U.K. are just now coming to realize the impact a data breach can have on an organisation and its customers, similar to developments in the United States five years ago when data breaches first became headline news.”

“Over the past year, the number of reported data loss incidents in the U.K. rose at a truly alarming rate,” said Phil Dunkelberger, president and CEO of PGP Corporation. “The new Ponemon study reveals the significant costs of such breaches and should help make organisations aware that they need to rethink their approach to data security. The investment required to prevent data loss is dwarfed by the potential costs of a breach, making the need for an enterprise data protection strategy undeniably clear.”

“The fact that more than a third of breaches result from data being shared with third parties in the normal course of business is a clear signal that organisations should examine how they are sharing their customers’ data with outsourcers, vendors, and partners,” said Joseph Ansanelli, vice president of data loss prevention solutions, Symantec.  “Our customers are well aware of this risk, which is why they are investing in data loss prevention solutions from Symantec.”

Read more

Solving the staff data misuse problem

913723_data_guardThe perennial employer problem of staff misusing data they have access to remains a constant, but Tier-3 says, the solution is now in most business manager’s hands.

“A recent Associated Press news report cites the example of a landlord snooping on tenants to discover details of their finances, as well as a woman who accessed her ex-boyfriend’s account after the couple broke up,” said Geoff Sweeney, Tier-3′s chief technology officer.

“Both people worked for a Wisconsin energy utility company and took advantage of their wide-ranging access to people’s data to go snooping,” he added.

But, says Sweeney, just as computers have made it easier for staff to snoop on information they should not be be looking at, so the same technology can be harnessed to beat the snoopers.

“It’s difficult to tackle problem head-on, especially if staff doing the snooping are authorised to have access to the database concerned,” he said, adding that the staff involved are often authenticated users who are mis-using their employer’s facilities.

“By introducing behavioural analysis software to the system, it’s possible to flag up any unusual database activity to the audit team concerned,” he said.

“By automatically comparing each individual data access against a dynamic baseline of previously learned employee behaviour it’s an easy task to spot staff who are accessing data they shouldn’t, in real time and even catch them in the act.” he added.

Read more

Aperture VISTA’s new handheld data capture device

data_capture_handheld1.jpgAperture has announced a handheld data capture device for its market-leading data centre management system, Aperture VISTA®. The new solution enables a data centre management to cost effectively, accurately and predictably collect detailed information about the equipment and resources within. The new tool will enable data centre management to cut the time and cost required to achieve return on investment for their VISTA solution by up to 50%.

Data centre management often struggles to accurately capture details of the equipment the organisation owns, where it is located and what it is connected to. Where organisations do try to capture data, they often send staff into the data centre to manually write notes on clipboards and then re-key them later. That makes errors likely, increases the uncertainty of the process and dramatically increases the time required to capture data. Because of the difficulty of capturing accurate information, organisations will often deploy a new data centre management solution using unvalidated data, which risks perpetuating errors and makes reporting and analysis suspect. In security-sensitive sectors, such as financial services or government, it is often impossible for outside contractors to enter the data centre to collect data.

data_capture_handheld2.jpgWith this new product, Aperture is providing a comprehensive solution that enables organisations to ensure their data centre infrastructure and equipment is recorded accurately. The Aperture VISTA Data Capture Handheld is a Windows Mobile device with the VISTA Data Capture Application installed. This hardware and software combination is fully supported by best practice processes. Organisations can allow Aperture Certified Partners to collect data in their data centres for seamless uploading into Aperture VISTA, or can receive training and certification from Aperture if they prefer to capture data themselves. Aperture’s Data Services organisation performs final validation in either case.

Aperture VISTA Data Capture Handheld has been designed to be easy to use and to virtually eliminate data entry errors. During the data capture process, the handheld can read existing barcode asset tags or can help with the configuration of new ones. The handheld is supported by Aperture’s extensive reference library of vendor equipment, which is used to validate data as it is entered. Data is also validated against other equipment in the vicinity and against other devices connected to the same power infrastructure.

Bill Clifford, CEO, Aperture, said: “Data Center Management often struggles to capture accurate information about what is in the data centre, where it is and what it’s connected to. The problem is not just a lack of technology, but also a lack of process. Aperture has implemented over 300 data centre management solutions. Aperture VISTA Data Capture Handheld, and its user certification process, delivers all our experience and best practice advice into the hands of the data centre staff.”

He adds: “Data centre management will be able to capture data more accurately, using whatever combination of internal or external staff is consistent with the organisation’s strategy and security policy. As a result, organisations will be able to more quickly realise the benefits of Aperture VISTA for data centre management, and will be able to manage and plan capacity with much greater confidence.”

Read more

Self destructing laptops – get yours today

laptopexplode.jpgVirtuity has developed an intelligent security technology that can block access and even destroy data if a laptop is moved from its designated space. Backstopp constantly monitors the electronic “heartbeat” of a laptop to determine its location. If the laptop is moved from its allowed zone the software steps in to remove sensitive data.

The development, which is designed to be used in conjunction with encryption software, will allow easier access to data for authorised personnel whilst providing another layer of protection from data theft. The comprehensive system can provide an at-a-glance report of which laptops contain what data, and their level of security.

Backstopp can utilise any wireless communication, such as WiFi, to locate laptops. The PCs can also be tagged with RFID chips to monitor movement when switched off – companies may wish to limit a laptop’s movement to one desk, one floor or one building within a facility, for example.

If a laptop owner reports it missing to the control centre, or the control centre concludes that the machine is “at risk”, such as being moved through a stairwell, the system seeks out the digital heartbeat and sends the “self destruct” message. Meanwhile the software on the laptop can use any in-built webcam to start taking a series of photographs to help with identification of the culprit, uploading the images as soon as any network becomes available. The system is completely invisible to the thief.

With prices starting at £10 a laptop per month, the new system is set to become an essential add-on security measure for companies and government departments. Data should continue to be encrypted in any case, says Virtuity, with BackStopp being used to bring a firm conclusion to any laptop loss.

“There are millions of laptops out there that contain valuable data,” commented Dean Bates, CTO of Virtuity. “The vast majority are not stolen for their data, but the ultimate recipient will often come across the data and use it for criminal purposes. This solution prevents that illicit use.”

Read more

Treating mobile data headaches

What’s the best approach to protecting the confidential data on mobile devices? We asked Check Point’s technical director, Caroline Ikomi, to give us her thoughts:

Read more
Page 8 of 8« First...45678

FREE Security Updates

Enter your email address:

Delivered by FeedBurner

Best Security Sites

Computers Business Directory - BTS Local TopOfBlogs