Better to be safe than sorry

IT managers must start looking after sensitive data properly or face the consequences, says Mark Samuels

Written by Mark Samuels

Computing features editor Chris Slinn recently received an envelope of informative literature about litter bins, bollards and gritters.

This was strange, seeing as I, and not the mysterious Chris Slinn, am features editor of Computing.

While company expenses might stretch to a taxi fare or a meal with a contact, it’s unlikely they’ll stretch to buying me my own grit spreader.

The double mix-up – the wrong person being sent irrelevant information – suggests that someone, somewhere had a lax moment with a couple of databases.

Such negligence is a widespread and unacceptable side-effect of the knowledge economy, where businesses have to deal with an ever-increasing range of customer records.

At the launch of his annual report last week, Information Commissioner Richard Thomas called on all UK chief executives to take the safekeeping of personal information more seriously.

Thomas referred to the inexcusable security lapses of the past 12 months that have seen laptops holding personal details stolen and credit card statements found in waste bags.

The annual report highlights how the Information Commissioner’s Office (ICO) has received almost 24,000 enquiries and complaints concerning personal information.

Such grievances are not hard to find. A mix-up between two banks meant that my friend recently received another woman’s personal banking information.

The bank offered £35 compensation, which is pretty measly when you consider they will sting you with a £30 bill for going just £10 overdrawn.

Which offence is worse – letting your account slip into the red, or giving personal banking details for free to a total stranger?

Perhaps part of the explanation for a lax attitude to personal information is the cheap availability of data.

Security specialist Symantec recently found there is a global underworld of criminal organisations selling stolen information.

UK-based credit cards are available from as little as £1.03, and full identities – US bank account, credit card, date of birth and government-issued identification number – can be bought for just £7.22.

With personal data devalued to such an extent, is it any wonder companies are playing fast and loose with customer information?

So what if a user downloads personal data to a USB stick, and leaves it on the seat of a bus in Birmingham?

You should care. First, identity theft costs the UK economy more than £1.7bn per year, according to the UK’s fraud prevention service Cifas.

Second, the technology leader will be responsible for ensuring security systems do not allow costly information leaks to take place.

But such activities are difficult to prevent, especially with IT managers finding it hard to deal with the downward trend in security spending.

Analyst Forrester Research found European and US chief information officers spent 7.75 per cent of their IT budgets on security last year, compared with 8.92 per cent in 2005.

However, Forrester also found that a drop in spending is not an indication of security’s declining significance, with 63 per cent of technology leaders suggesting security upgrades are a business priority.

It will be your job to convince the board that spending more on information security is worthwhile.

What do you think? Read my blog at: http://knowledge.computing.co.uk

  • Have your say
  • Send to a friend
  • Print this
  • Share

reader comments

related articles

 

related whitepapers

today's top stories

Face facts: social media is the future

No organisation can afford to ignore the way business communications are changing 18 Mar 2010

Is the data watchdog about to pounce?

Experts believe the Information Commissioner’s Office is itching to use its new power to impose hefty fines for data breaches. Martin Courtney reports 18 Mar 2010

Lloyd’s of London gears up for regulation

CIO Peter Hambling tells Angelica Mari about how the insurance market has updated its IT infrastructure to comply with new regulations 18 Mar 2010

Protests greet new Digital Economy Bill amendment

ISPs, digital rights groups and Liberal Democrat supporters cry foul 05 Mar 2010

IT Leaders' Forum in association with IBM

A unique opportunity to hear from expert speakers and engage in a debate about the future of the CIO job function 29 Jan 2010

Advertisement

Keys to successful Service‐Oriented Architecture implementation

This white paper explores best practices and general design patterns for service oriented architecture (SOA).

The Roadmap to IT Maturity — Matching Strategy to Infrastructure for Business Success

This paper defines a roadmap for matching infrastructure strategy to business success.

Advertisement

Keep up to date with the latest products, services and technologies from the world's leading IT companies; ITHound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

More available - click 'submit' to view

Existing User

Newsletter user login:

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

IT Salary Checker

Check salary here

Advertisement

Latest poll

NHS centralised data

NHS centralised data

Do you think the NHS can be trusted to safely look after personal data electronically?

View poll results

Latest audio and video articles

Video

HP unveils S Series notebooks

'Prosumer' line overhauled 01 Mar 2010

Web Seminar Listings

Preparing for enterprise-scale Windows 7 migration

The web seminar on 18 Feb will discuss how Windows 7 migration can increase IT efficiency in large enterprises, freeing up budgetary and personnel resources to focus on business innovation. Our panel of experts will examine the strategies, tools and services IT leaders can use to migrate successfully and reap the rewards of increased efficiency. 19 Feb 2010

Latest in-depth articles

Smiths Group CIO Brian JonesAnalysis

Q&A: Brian Jones, CIO, Smiths Group

How should conglomerates be looking at the new IT technologies coming through? Brian Jones explains. 19 Mar 2010

Analysis

What security strategy should enterprises adopt after the recession?

Act now to put your your firm on higher growth path advise CISOs 19 Mar 2010

Primary Navigation