in

This Blog

Syndication

Tags

News

AlertBoot offers a cloud-based full disk encryption and mobile device security service for companies of any size who want a scalable and easy-to-deploy solution. Centrally managed through a web based console, AlertBoot offers mobile device management, mobile antivirus, remote wipe & lock, device auditing, USB drive and hard disk encryption managed services.

Archives

AlertBoot Endpoint Security

AlertBoot offers a cloud-based full disk encryption and mobile device security service for companies of any size who want a scalable and easy-to-deploy solution. Centrally managed through a web based console, AlertBoot offers mobile device management, mobile antivirus, remote wipe & lock, device auditing, USB drive and hard disk encryption managed services.

UK Laptop Encryption: ICO Warns Barristers And Solicitors To Secure Information

The UK's Information Commissioner's Office (ICO) has recently issued a warning to people in the legal profession. According to an August 2014 news release, the ICO has seen a higher-than-expected-number of data breaches stemming from the actions of solicitors and barristers.  Normally, the recommendation would be to use data encryption software to secure sensitive files; however, because paper files are involved, easy data security efforts are being stymied.

15 Incidents in 3 Months

The ICO revealed that there were "15 [data breach] incidents involving members of the legal profession have been reported to the ICO" in the three months preceding August 2014.  It noted that while these numbers don't seem high, legal professionals "carry around large quantities of information in folders or files when taking them to or from court, and may store them at home" increasing the risk of a serious data breach.

Data Protection Tips from the ICO

The problem is that these files and folders are of the paper, not computer, variety.  What to do?  The ICO has proposed the following recommendations: 
  • Keep paper records secure. Do not leave files in your car overnight and do lock information away when it is not in use.
  • Consider data minimisation techniques in order to ensure that you are only carrying information that is essential to the task in hand.
  • Where possible, store personal information on an encrypted memory stick or portable device. If the information is properly encrypted it will be virtually impossible to access it, even if the device is lost or stolen.
  • When sending personal information by email consider whether the information needs to be encrypted or password protected. Avoid the pitfalls of auto-complete by double checking to make sure the email address you are sending the information to is correct.
  • Only keep information for as long as is necessary. You must delete or dispose of information securely if you no longer need it.
  • If you are disposing of an old computer, or other device, make sure all of the information held on the device is permanently deleted before disposal.

What I find interesting is that at least half of these recommendations are actually geared towards electronic data.  I guess, at the end of the day, you can't really give pointers for just the one and not the other.

Plus, what kind of tips could you possibly give for a bunch of sheets collated together or stuffed into a folder, aside from "don't lose them"?


Related Articles and Sites:
http://ico.org.uk/news/latest_news/2014/information-commissioner-sounds-the-alarm-on-data-breaches-within-the-legal-profession-05082014
http://www.techradar.com/news/apple/computing/ico-fires-warning-to-legal-professionals-following-troubling-number-of-data-breaches-1260641#null
http://www.databreaches.net/uk-ico-fires-warning-to-legal-professionals-following-troubling-number-of-data-breaches/
 
<Previous Next>

SMB Laptop Encryption: Yoga Studio Has Laptop Theft, Doesn't Know Password-Protection Doesn't Do Anything

HIPAA Laptop Encryption: NYU Langone Had A Laptop PHI Breach In April

Comments

No Comments

About sang_lee

Sang Lee is a Senior Account Manager and Security Analyst with AlertBoot, Inc., the leading provider of managed endpoint security services, based in Las Vegas, NV. Mr. Lee helps with the deployment and ongoing support of the AlertBoot disk encryption managed service. Prior to working at AlertBoot, Mr. Lee served in the South Korean Navy. He holds both a B.S. and an M.S. from Tufts University in Medford, Massachusetts, U.S.A.