Thursday, 17 May 2012
Companies lack tools to report breaches within 24 hours
Companies lack tools to report breaches within 24 hours
By Anh Nguyen, Computerworld UK | Feb 1, 2012
0 comments
Digg
PrintOrganizations will find it difficult to identify and carry out data breach notifications within 24 hours, according to industry experts.
The new EU data protection laws revealed today will require all companies and organisations to notify the national supervisory authority and affected citizens of any serious data breaches within 24 hours.
"Mandatory reporting of data breaches within 24 hours will be difficult, if not impossible, to comply with," said Bridget Treacy, partner at law firm Hunton & Williams.
Gerhard Eschelbeck, CTO at IT security firm Sophos, agreed, describing the deadline as "very aggressive", and said that this would impact the quality of the breach notifications.
According to Ross Brewer, VP and managing director for international markets at log management solutions provider LogRhythm, this quality issue has already become a problem in the US.
"Unfortunately, all too often [data generated by organisations' IT systems] is managed in an inefficient and disparate manner. This can lead to inaccurate data breach notifications being issued.
"This 'over-disclosure' has become a particular problem in the US. Many companies have found themselves forced into issuing blanket breach notifications, which may even overstate the severity of the incident, due to a lack of visibility within their IT systems," he said.
A fine of up to two percent of annual global turnover for businesses that breach the data protection laws has also been proposed today.
Similar
Add comment
knowledge_central_tab
Knowledge Central
Trusted Mobility Index
The mobile ecosystem of devices, services and networks is at a critical inflection point.While the mobile revolution is unleashing massive opportunities in both emerging and mature economies, it is also increasing in complexity and confusion. The reality is the lightning-fast adoption of powerful, smart devices is outpacing society’s ability to secure them. Today, trust in mobility hangs in the balance.
The state of the Internet, Q4, 2011
Geography appears to play a role in frequency of observed attacks on specific ports. For example, Port 23 (Telnet) is a favorite target for attacks observed to be originating from South Korea and Turkey, where it accounted for more than five times the number of attacks targeting the next most popular port (445 in both countries). Other instances of geography-based port targeting include observed attacks centered on Port 1433 (Microsoft SQL Server) in China and on Port 80 (WWW/HTTP) in Indonesia.
HID Global deploys a centralized, web-based IP access control solution at Fuxi Power Plant
Unable to meet the needs for real-time monitoring with its traditional patrol system, China's Fuxi Power Plant has deployed HID Global's VertX V2000.
StubHub: How to spot fraud before it happens
Whenever a list of log-on credentials is dumped onto the Web, retailers get hit with waves of automated attacks. Here's how ticket marketplace StubHub fights the threat.
