| Introducing a Single Governance Framework for LCM Security Inc. WebEx DATE: March 5th, 2008 TIME: 10:00AM EST RSVP: Please Click Here |
| About Us: Check out the Press Release on Data Governance at www.Varonis.com |
Any business that deals with credit card data -- whether they're processing, transmitting, or storing it -- needs to abide by the Payment Card Industry (PCI) Data Security Standard. Businesses out of compliance could have their credit card transaction privileges completely revoked. The new PCI requirement 6.6 requires securing your Web Application Servers by June 30, 2008.F5 can help you comply with this mandate, being a leader in the Web Application Firewall space with their BIG-IP Application Security Manager (ASM). Join us to see how F5's Web Application Firewall simply and easily allows you to meet this requirement.
With Thanksgiving approaching I thought I'd leave you with a few good links to check out with during your free time. I myself, will be taking a few days off, to find new juicy items for next weeks entries. Have a happy and safe holiday."Network security products vary in their level of protection. If you're looking at security options to protect your network, read this description of unified threat management (UTM) to learn what UTM's advantages are compared to traditional security models."
"You know retailers are ready for Black Friday – but so are hackers poised to launch a slew of Web-based attacks against consumers. Your money and personal information could be at risk."
Since today is day one of the new blog I felt I needed at least two major contributions to start it of right. This however is from the Edmonton Sun Newspaper, by Kevin Crush. Large organizations have to get better at keeping people's information private, says Alberta's privacy commissioner. "I'm sort of laughing, but I don't know what else to do at this point. It is just very, very frustrating," said Alberta Information and Privacy Commissioner Frank Work.
"We just have to recognize that portables go missing. We had at least four (Capital Health) laptops go missing, and on the weekend we had a memory stick go missing. It's reaching epidemic proportions and I don't know what the answer is."
Yesterday, Work released his report into the theft of four Capital Health laptops last August - one containing 20,000 patient names, health card numbers, addresses and reasons for admittance into the hospital.
Work found that Capital Health did not properly safeguard the information and gave several recommendations for the health authority to better protect people's privacy, including physically securing portable devices, having a valid reason to store health information on portable devices in the first place, and, Work emphasized, to encrypt the information.
"The equation - and we keep hammering at this - the equation is personal information plus a portable equals encryption," said Work.
Capital Health agreed to all of the commissioner's recommendations and was already working on what the next steps would be when they first reported the theft to the commissioner, said spokesman Steve Buick.
For the past year, Capital Health has been working on getting an encryption program set up and hopes to have it ready by January.
"Encryption is the right thing to do," said Buick.
"We've been working at it for a year. It's a very big exercise and we totally sympathize with the commissioner's concerns of the time it takes for big organizations to get it in place."
He noted it takes longer for big organizations to set up encryption programs than it would for a home computer user because of the massive size of the health authority and how complex the information flow is.
Buick said Capital Health is also working on increasing file storage space so less information would be stored on portable devices.
Capital Health will not face any sanctions for the privacy breach. Work said Alberta's laws do not allow for any sort of sanctions but only give him the authority to make recommendations.
