Data is a critical, intangible asset to any organization. Data is stored on paper, electronically, and can also be retained by humans. It flows in many forms as well (electronically, thorugh paper reports, forms, letters, and by word of mouth). Protecting information assets presents multiple challenges.
As the first Information Security Manager at a fairly large financial institution, I lived by trial and error for a while. Admittedly, I made mistakes along the way, but the good thing is I learned from them and most of the time put what I learned to use.
Thanks to the Internet and the Information Technology Age, information is being generated exponentially faster than at any other time in history. Privacy has basically gone out the window, and it's no wonder that headlines about data breaches have become commonplace.
It’s been more than a year since the federal government codified its expectations for electronic discovery, or e-discovery. The amended rules require any organization that might be sued in federal court to have systems for retrieving electronic data — which could include e-mail, network activity logs, digital recordings, voice mail, spreadsheets and more — if the information could be considered evidence in litigation.
Most readers have heard about the recent $2,250,000 fine assessed to CVS Pharmacies for failing to properly protect discarded personal information. What many may not realize is that over the last 18 months, the combined fines assessed against organizations for improper disposal of personal information approaches $20,000,000; far surpassing the combined total of such fines over the preceding decades.
The most common mistakes entities make in protecting intellectual property, along with suggestions to mitigate the risk of these threats becoming a reality
Reclamere RSS Feed