Security threats Toolkit
Story: Privacy tsar: 277 data breaches since November
How to Address these Data Breaches......................
A solution is required to centrally manage, monitor and control precisely which removable storage devices and applications are permitted to run on government networks. A system that minimises user access rights to data, applications and removable media by operating a whitelist of known, trusted and permitted applications and devices. By default, end users should have no access to removable media and where this is permitted, via centralised control of the user privileges, encryption can be enforced on the data or the device. This “default deny” approach will ensure clear lines of responsibility and accountability for data being transferred and fosters a culture of data security among personnel that are granted access to citizen data. All data transferred, as well as attempts to do so, shuld be centrally available for audit. This will allow for scrutiny of departments’ data handling procedures, aid reporting and answer the requirement for departments to keep records in the event of a spot check by the Information Commissioner.
Address these Data Breaches:
* Remove the risk of data loss through the unauthorised use of removable media
* Enforce encryption on removable media
* Remove the risk of data leakage or data theft as a result of unauthorised applications
* Prevent unknown or malicious code from running, including malware; zero-day threat and other destructive viruses that target systems and data; keylogger software or other spyware
* Audit device and application usage
* Maintain IT system integrity and improves system performance and network bandwidth
* Enable compliance with evolving directives or regulations governing privacy
These solutions exist today, so their should be no more excuses.
Full Talkback thread
