An archive of all the news items November 2005 to January 2006 on Compliance and Privacy
To avoid long load times news is archived periodically. If you can't find what you are looking for on this page please refer to our archives. Please use the search engine for ease of retrieval.
Main News page |
Archives: (oldest)
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13
(most recent)
Brussels Pauses Financial Regulations
Brussels has granted the financial sector a breathing space in the welter of Regulations after the huge number than that have been imposed over the last very few years. Many planned items are "paused"
Click Here for the full article
Sarbanes-Oxley Brings Business Benefits Outside the USA
Just as the mists were starting to clear for C-Level executives, a torrent of SOX is heading Europe's way. It can certainly be argued that Euro-CIOs should already be aware of Sarbanes-Oxley, but so many of them said “US Only. Not Relevant!” and moved on. The more astute looked at the regulatory regime and said “Ah, if we comply here, then it genuinely makes our lives easier for the future,” because they recognised competitive advantage and cost saving when they saw it.
Click Here for the full article
Compliance and Privacy Newletter - 5 December 2005
In this issue:
- Cybercrime nets more than drugs!
- MiFID Catches C-Level Execs Unawares
- Breaking News
Click Here for the Newsletter
Hard Numbers on Internet Crime
A recent headline claims that cybercrime is more profitable than the drugs trade.
How can this be true? Trafficking in drugs is a mature criminal enterprise, large scale professional Internet crime only emerged in the past five years. The number of daily security alerts issued by VeriSign iDefense increased from 21 per day to 59, a 180% rise. If the claim that Internet crime already earns $105 billion a year is true and the growth rate is even a fraction of that, we are in very, very serious trouble
Click Here for the full article
Cybercrime yields more cash than drugs?
Compliance and Privacy's Peter Andrews looks at the claims made in a major interveiw Valerie McNiven gave to Reuters in Riyadh on 28th November. Andrews takes a harder look at the numbers quoted and has a critical look at the substance of the claims
Click Here for the full article
Michael Durant Refused Landmark Appeal by The House of Lords
Michael Durant is out of luck in his quest for a ruling in his favour in the UK courts, the House of Lords said at the end of November 2005. His only route forward is now Strasbourg.
Click Here for the full article
Information Commissioner sets priorities for Data Protection enforcement
The Information Commissioner's Office has launched a new Enforcement Strategy, which targets organisations that deliberately or persistently ignore their obligations under the Data Protection Act 1998.
Click Here for the full article
Nearly Half of Consumers Worldwide Willing to Switch Banks for More Security
Forty-five% of consumers worldwide are willing to switch to financial institutions that offer more security protection, according to new research from Unisys Corporation that polled more than 8,000 people around the world on identity fraud and bank security issues.
Click Here for the full article
MiFID'S Potential Impact on Europe's Securities Markets
The Markets in Financial Instruments Directive (MiFID) is likely to be one of the greatest legislative changes seen in Europe 's securities markets in over two decades. The intention of MiFID is to raise the standards of the European investment markets to US market levels and in particular, focus on best execution, investor protection, and transparency of trading.
Click Here for the full article
MiFID - the Markets in Financial Instruments Directive
Alongside Sarbanes Oxley and Basel 2 is the MiFID, which, if the European Parliament has its way, will be delivered inside two years. And this régime has swingeing penalties for failure to conform and will dwarf the budgetary impact of SOX and Basel 2 put together
Click Here for the full article
Password-stealing keyloggers skyrocket
Hackers are on target to release more than 6,000 keystroke loggers in 2005, a 65 per cent increase from the 3,753 keyloggers released last year, according to security intelligence organisation iDefense.
Click Here for the full article
Liberty Alliance to Speed Wide-Scale Adoption of Strong Authentication Solutions
The Liberty Alliance Project announced the formation of a global, cross-organizational expert group focused on developing open specifications for interoperable strong authentication. Liberty's new Strong Authentication Expert Group has been created to speed the worldwide deployment of interoperable strong authentication and to help organizations meet new industry-wide demands for universal strong authentication solutions.
Click Here for the full article
Protecting your personal information ranked as a top issue
Protecting personal information is now ranked as one of the top three most socially important issues, according to new research published by the Information Commissioner, Richard Thomas, on 16th November 2005.
Click Here for the full article
Backups, Archives and Subject Access Requests
We were prompted to look at this by the UBS/Perot/Michael Johnson case. The circumstances of that case mean that one party is calling for Data Backups to be retrieved, originally as part of a Statutory Access Request [SAR], and later by use of a Witness Summons. The other party is resisting. We're not going to comment on the Witness Summons, except to note the huge cost, stated to be £4.27m, of complying. Instead we're confining ourselves to the Data Protection Act 1998 [DPA].
Click Here for the full article
Compliance and Privacy Newletter - 14 November 2005
In this issue:
- Wi-Fi Breaks Data Protection Law
- Latest ISIB Report highlights VoIP risks
- VeriSign MSS 3.0 Portal Training
- Telemarketing and Privacy - Ofcom Acts on Silent Calls
Click Here for the Newsletter
Compliance is only one element of the security puzzle
Compliance is only one element of the security puzzle - cost and complexity are equally if not more important to the overall efficiency and protection of users, networks and ultimatlely assets and smooth running of business.
VeriSign's Gabriel Swift responds to the Ernst and Young 8th annual Global Information Security Survey
Wi-Fi Breaks Data Protection Law
Unless you as a Wi-Fi Hotspot Provider take sufficient care when configuring your Wi-Fi then you run the risk of breaking Data Protection laws. The EU Information Commissioners are now looking long and hard at how well companies protect data – it is only a matter of time before they turn their attention to Wi-Fi.
Click Here for the full article
Spear-phishing – the new corporate threat
Spear-phishing attacks are on the increase according to IBM and others. Unlike traditional phishing attacks which randomly spam thousands of e-mail addresses, spear-phishing attacks specific targets. It's more difficult to set up but the rewards can be far higher because a successful attack gives the “spear-phisher” massive access within a corporation. To date such attacks have largely gone unreported because companies fear the loss of trust that would occur if they went public.
Click Here for the full article
HP has bought its own customer list!
Interex, the Liquidated Independent HP User Group's Data is a Commerical Asset
This "stranger than life" story deals with the business assets of Interex, the independent HP user group. Interex, which went into liquidation earlier this year, has its list of members as a business asset. And the liquidators, quite reasonably, want to sell this asset to salvage what they can to pay off the £2.5m that it owes. HP has paid £40,000 for 100,000 of its own customers to prevent that data being circulated elsewhere
Click Here for the full article
Regulatory compliance takes the lead as the most important driver of information security, surpassing worms and viruses
Yet organizations are missing the rare investment opportunities that compliance offers to promote information security as an integral part of their business says Ernst & Young's 8th annual Global Information Security Survey
Click Here for the full article
Data Protection and Email Marketing
On the second of November 2005 The United Kingdom Information Commissioner issued a new Data Protection Good Practice Note entitled Data Protection and Email Marketing. This clarifies the situation with regard to how you should conduct, should not conduct, and most importantly must not conduct email marketing campaigns.
Click Here for the full article
Telemarketing and Privacy - Ofcom Acts on Silent Calls
Today Ofcom has finally announced that it will use its powers under the Communications Act (Sections 128-131 of the Communications Act 2003) to take action against persistent misusers of the network. And misuse now includes silent calls. A silent call is one where an automated dialer initiates a call when there is no tele-operator available to handle the call, resulting in the phone ringing but the recipient of the call only hearing silence.
Click Here for the full article