Data Security Goes Beyond Encryption

Over the weekend Bell announced that more than 22,000 SMB customers’ user data was compromised and posted online. So what was the source of the breach? A third-party supplier.

While not directly related to encryption, this particular incident highlights another key aspect of data security that is often overlooked, how partners handle data. In this particular instance, a company Bell works with was hacked and information stolen. While not a large-scale breach in comparison to recent events in the news, it’s a breach nonetheless.

This really highlights the importance of ensuring all partners and third-party suppliers are regularly audited to guarantee compliance with organizational security policies. Security always starts with an internal look, but should always expand outside the walls of the business. Key things an organization should take into consideration include:

  1. Have you had an independent assessment of the data/information risks within the business?
  2. Have you identified high-risk business associates, partners and suppliers?
  3. Have you validated which information and security controls they have in place and where any gaps may be?
  4. How do you know your business associates are actively managing the security of your company’s data?
  5. Is someone assigned the responsibility of keeping up with privacy and security governance including monitoring outside associates and suppliers?

It’s simple really and it’s summarized easy in this graphic:

EnsureCompliance

While hindsight is typically 20/20, it’s the last thing you want to rely on when it involves the security of your customer’s data.

Previous Post
Managing Security and Compliance
Next Post
Enabling the IT Security Admin

Related Posts

Keeping up with the Jones’

The evolution of technology goes at a breakneck pace. Whether it’s new products coming to market or updates to existing products – it’s a never-ending cycle. As a software company that supports multiple Operating Systems (OS), we’re no different and…
Read more

Improving Forensic Recovery for SEDs

This week WinMagic announced that SecureDoc offers new interoperability with Guidance Software’s EnCase Forensic product – specifically – forensic data recovery on self-encrypting drives (SEDs). (more…)
Read more

Yahoo! Security!

It’s always fun to come up with headlines around a brand that has an exclamation point as part of their name, but I digress. What this is really about is Yahoo!’s recent announcement that they’re going to start to encrypt…
Read more

Leave a Reply

Your email address will not be published. Required fields are marked *

Fill out this field
Fill out this field
Please enter a valid email address.

Menu
Contact Us

This will close in 15 seconds