Compliance with international recycling standards, such as ISO 14000, could leave businesses wide open to hackers and fraud attempts.
David Macken, managing director of System Associates, a provider of e-Government security services, has warned that confidential information is not being safeguarded.
'Individuals are being encouraged to recycle their paper at work, yet not enough thought is being given to confidential information,' he said. 'One visit from a tenacious hacker to the office recycling bins can often provide enough information for them to get straight to the heart of confidential information.'
Macken says even companies operating a secure disposal system are vulnerable.
Most secure disposal companies come once a week and very often there is no locking mechanism on the bins. This gives a false sense of security, but is an open invitation for computer hackers, who know exactly where to head to retrieve confidential information,' he said.
Initiatives such as ISO 14000 are usually implemented through general management and administration and little thought is often given to the type of material that could be of interest to hackers.
Email addresses, internal passwords, information about suppliers can all be used to help the hacker pose as an employee, supplier or customer to obtain more confidential information.
Macken believes recycling policy should always involve IT security personnel, as a matter of principle.
'Those most at risk of security attacks should ensure IT security is discussed throughout the organisation, and especially during employee induction,' said Macken. 'Vulnerable companies often forget to brief all their staff and particularly forget to brief new employees who are most likely to be supplied with new passwords and confidential information.'
Macken also said that a supplier policy should be put in place to ensure suppliers comply with IT security measures.
What do you think? Email us at: feedback@computing.co.uk
Further Reading:
Firms gear up for big impact of WEEE
reader comments