Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The Danger of Retaining Data

netspi.com | blog | #compliance | #risk-management | #breach-notification | #data-retention | #data-classification | #records-management

Summary

In a March 25 front page article in the Minneapolis/St. Paul Business Journal, it was revealed that sensitive records including employee Social Security Numbers, payroll information, and medical records, from a long-defunct tech company were inadvertently auctioned off along with the filing cabinets they were stored in.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Are We Ready for a Security Software Assurance Program?
Integrating security checks and balances with your application development processes is certainly uncharted territory for many security professionals.
blog · netspi.com
Maturity and Convergence at the PCI-SSC Community Meeting
I attended the PCI-SSC community meeting this past week (September 22-24). There were three key issues discussed that showed that the PCI program is maturing and that a number of standards and regulations are converging (both in and outside the PCI world).
blog · netspi.com
Healthcare Organizations and Tighter Security Requirements
Because of increasing threats, high-profile data breaches, and increased awareness of the damage they cause, we anticipate a substantial tightening of regulations and contractual requirements that will significantly impact information security in healthcare.
blog · netspi.com
Compliance vs. Risk
As a company, we’ve tried to understand which organizations are most likely to mature their information security programs.
blog · netspi.com
Is your Compliance Driven by More Than an Audit?
Preparing for an audit can be one of the best ways to fund and improve your security program, but this “stimulus package” for your compliance effort typically dwindles once an organization completes or passes an audit.
incident · netspi.com
Data Breach Alphabet Soup
Drawing on Theodore Kobus's A-to-Z of healthcare data breaches, the author highlights two: quit retaining unneeded data, and accept that breaches will happen, then train and rehearse response.
back