OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
[Dataloss] Call for worldwide breach notification laws

From: security curmudgeon (jerichoattrition.org)
Date: Wed Sep 19 2007 - 02:58:07 CDT


---------- Forwarded message ----------
From: InfoSec News <alertsinfosecnews.org>

http://www.siliconrepublic.com/news/news.nv?storyid=single9222

By John Kennedy
17.09.2007

High profile security breaches such as the theft of financial details of
more than 46.7 million TK Maxx customers and the burgeoning level of
personal data held by business has led to the chief security strategist of
a major software firm calling for unified and stringent international laws
requiring firms to reveal breaches as they occur.

Chief security strategist at Citrix Kurt Roemer said that governments,
including Ireland, should establish laws requiring organisations to notify
individuals in the event that their personal information is compromised in
a data security breach.

In March of this year it emerged that details of 45.7 million customers of
US retailer TJX (known here in Ireland as TK Maxx) were stolen. The data
was accessed on TJX’s systems in the UK and in Massachusetts over a
16-month period and the data accessed covered credit and debit card
transactions dating as far back as December 2002.

Such breaches have prompted governments around the world to consider
implementing stringent breach notification laws.

[..]

_______________________________________________
Dataloss Mailing List (datalossattrition.org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml