| Training and Investments needed for IT Security |
|
|
|
| Wednesday, 03 January 2007 | |||||
|
On this proposal, in the USA the debate about which measures could be more effective in the fight against cyber crime is still taking place but is spite of good intentions, the result seems to be quite discomforting. On December 12th 2006, the University of California declared that its database had been jeopardized by an attack that provoked a huge data leak involving information on about 800 thousands parents, students, teachers and employees. This news had a deep impact on common people because of the size of the leak and because it was the second huge incident about “personal data disclosure” that had happened in 2006. Indeed, the UCLA attack followed the loss of a Department of Veterans Affairs laptop computer containing personal information on more than 25 million veterans. According to recent studies by several IT companies, security represents the main concern for a number of government IT executives, as testified by a report by Accenture/IDC that was disclosed just few days before the incident at California University . Unfortunately, the report shows also that this deep concern in IT matters does not bring about adequate investments. On average, about 10 percent of the respondents’ IT budgets are earmarked for security. Network, data center, operations and desktop expenditures each garnered bigger slices of the budget. The problem actually, isn’t only about money: accurate educational programs are needed to inform executive leaders about the potential impact of cracking attacks, security breaches and digital threats in general. Chief executive officer, legal counsel, human resources directors and other executives with a role in incident response should be involved in such training programs. A company’s management would be this way taught about the consequences of any leak in the security system. Many IT experts agree on this point: an advanced IT equipment represents an important step to prevent digital intrusions but it isn’t a guarantee. Companies should consider education as a “security instrument” and include education among corporate priorities. Indeed, despite we cannot be sure that our system is completely safe, we can train the staff in order to count on a skilled team that will limit the damages and resist to the attack whenever it will take place.
Powered by a Zone-H(ified) version of AkoComment 3.0! DISCLAIMER: Forum postings are the opinion of the posting author alone, and should not be taken as the opinion of Zone-h. The author is entirely and solely responsible for all content that he/she uploads, posts, or otherwise transmits via the website. Zone-h is not responsible for such content. However, Zone-h shall have the right, but not the obligation, to delete, move, or edit any content that violates this agreement or is otherwise objectionable as determined by Zone-h in its sole discretion and without notice. |
|||||
Identity theft and data leaks hit a lot of companies and institutions all over the world in 2006, and it is definitely unlikely that attackers will stop in 2007.
| < Prev | Next > |
|---|
