Tag Archives: GDPR

Genetec issues Best Practice advice on privacy protection measures

Business intelligence solutions specialist Genetec has shared practical guidance on how organisations can secure their operations in a way that respects everyone’s privacy.

To date, 107 countries have established legislation that secures the protection of data and privacy. This follows in the footsteps of the General Data Protection Regulation (GDPR) in Europe, on the back of which 1,059,520,456 Euros’ worth of fines have been issued since its establishment in 2018. Despite that, only 59% of organisations say they meet all GDPR requirements.

“International Data Protection Day represents the perfect time to share what we’ve learned over 25 years,” explained Christian Morin, Chief Security Officer at Genetec. “Organisations should never have to choose between data privacy and security. As cyber threats and privacy regulations evolve, organisations need to remain vigilant. Security solutions that are built on privacy by design principles enable organisations to achieve their business goals, while at the same time maintaining compliance.”

Genetec recommends organisations ensure their security systems respect data privacy. They can do so in a number of ways.

Establish privacy governance

Designate a Data Protection Officer to guide strategies and comply with regulations. Map how data is collected and processed, where it’s stored, how long it’s kept and who can access it. Categorise data in terms of risk. Identify people outside of the organisation who may need to access your data and assess the risk your data processing operations pose to citizens’ rights.

Build a data protection strategy

Conduct a gap analysis of data processing operations. Evaluate existing systems’ ability to address privacy without draining resources. Implement new processes as necessary and document all privacy policies and procedures. Educate the entire workforce on cyber security and privacy Best Practice.

Assess the capabilities of technology and partners

Proactively seek out those that may offer to help uphold privacy and protection. Inquire about certifications and steps partners and vendors are taking to comply with privacy legislation. Choose solutions built with ‘Privacy by Design’ that enable privacy features by default. Consider solutions that enable the standardisation of processes and policies across different regions.

Build security systems with privacy in mind

Enable multiple layers of defence to protect personal information collected by physical security systems. Define user access to restrict those who can log into applications and what they can see/do. Implement privacy features like video anonymisation that blur identities in footage. Automate data retention policies to ensure that data is automatically deleted as required. Leverage a digital evidence management system to securely share information for investigations and citizen requests.

Remain vigilant

Stay current on data privacy laws and evolve policies and processes regularly. Leverage hardening tools to actively monitor cyber security compliance and keep up with software updates. Monitor user activity logs to check what data, systems and files are being accessed. Activate health monitoring in order to receive alerts automatically about system vulnerabilities or device failure. Consider a hybrid cloud implementation to streamline access to the latest cyber security and data privacy updates.

*Further detail on privacy protection initiatives is available online at https://www.genetec.com/trust-cybersecurity

Leave a comment

Filed under Security Matters

Facial recognition “to open new avenues for smart cities” in 2022

In 2022 and beyond, facial recognition technology will play a key role in the future of global urban development and assist in improving the experience of smart citizens. From personal convenience through to enhanced public safety, the range of applications is wide-ranging. That’s the firm belief of facial recognition technology solutions provider Corsight AI.

Using their face as their credit card, members of the public will no longer have to leverage cash for payments or worry about a stolen/lost wallet. A secure biometric system – such as that being pioneered by Amazon Go stores – makes paying for goods or services effortless.  

In terms of security and access, workplaces are beginning to understand the value of the technology as it can enable the seamless flow of people and facilitate the protection of sensitive locations by restricting access to approved visitors only. Spaces such as building sites, maternity wards and Critical National Infrastructure locations can all benefit from this software.

Facial recognition can also be used in smart cities to help identify those at risk. In the case of searching for a missing child or an Alzheimer’s patient, facial recognition technology can significantly speed up the process.

There’s a particular concern right now about the safety of public streets, especially so for women. Facial recognition technology can prove useful for recognising unusual behaviour and identifying and tracking known offenders throughout the city environment. 

Higher standards in 2022

As is the case with any technology, there are potential risks to using facial recognition, such as threats to privacy, violations of rights and potential data theft. These concerns are of significant importance and have even forced the hand of some public and private organisations to limit the use of the technology. This calls for thoughtful Government regulation moving forward and heightened responsibility for facial recognition technology vendors and operators to comply with the rules.

Currently, documents such as the General Data Protection Regulation (GDPR) are in place to set industry standards and provide ways for individuals to protect their personal data – and, by extension, their privacy and other Human Rights – which we’re seeing enforced. 

Although the industry continues to demand greater certainty from lawmakers, it’s evident that Best Practice is emerging from the application of the GDPR and its core principles. The use of Privacy Management Programmes and Data Protection Impact Assessments demonstrates the willingness to protect the data rights of citizens and maintain trust and confidence across our communities. A combination of these policies and their application will continue to ensure facial recognition technology can be used as a force for good. 

Cyber security

As data processing becomes more central to operations in 2022, organisations will need to be more responsive to the evolving cyber threat landscape. For facial recognition technology end users, in particular, securing biometric data will remain a top priority this year.

Cyber criminals are becoming increasingly sophisticated in their methods, and will now typically seek the most sensitive data to hold at ransom. Vendors must therefore implement the most stringent security measures to protect sensitive data and ensure end users are working hard to stay on top of the threat.

Customers will also demand more transparency from organisations about how they’re using their biometric data and how it’s being stored and protected. To garner trust, users of facial recognition technology must be more explicit in its use and set clear measures on individual privacy and data protection.

In 2022 and beyond, Corsight AI expects to see further commitment from policymakers and industry to develop even higher standards that attain levels not seen before. The move towards ‘Trustworthy Artificial Intelligence’, greater regulation and a genuine commitment to Human Rights will support the development of this software such that it can be used as a force for good.

Leave a comment

Filed under Security Matters

Notting Hill Genesis surveillance upgrade project witnesses Cloudview and Amthal Fire & Security working in tandem

Amthal Fire & Security has been working closely with secure cloud CCTV specialist Cloudview in order to upgrade legacy network surveillance systems and realise smart cloud-based and, importantly, compliant solutions for the benefit of staff and residents involved with Notting Hill Genesis. 

Notting Hill Genesis is one of the largest housing associations in London and the South East, with its head office at Kings Cross and five further site locations requiring high quality protection for more than 1,500 office-based members of staff.

Amthal Fire & Security has been working closely with Cloudview to take responsibility for security maintenance across the office portfolio, alongside ensuring the safety and security of residents housed in both new and existing dwellings.

To ensure efficiency savings, compliance and smart capability when it comes to CCTV, Notting Hill Genesis’ visual data partner Cloudview has supplied its specialist systems for Amthal Fire & Security engineers to install across the office and development network.  The new system removes the need for DVRs and allows authorised personnel instant and secure remote access for the management of evidential footage stored as required in case of a threat or an emergency scenario.

Image Useage

Compliance with the GDPR

Suki Kahlon, office services manager for central services at Notting Hill Genesis, informed Security Matters: “The need to update CCTV systems for ensuring compliance with the General Data Protection Regulation (GDPR) was of paramount importance, both for the Notting Hill Genesis team and also for our residents and their safety. Partnering with Cloudview and, later on, Amthal Fire & Security has been of great benefit. They understand our working environment.”

Kahlon continued: “Both companies operated in such a way as to enable a scalable upgrade programme of works across our office base and various housing developments. Essentially, our ambition is that wherever we have CCTV systems in place, we want to upgrade to the cloud and bring our networks together in a centrally managed visual data infrastructure. The Cloudview solution has been well received by building managers and authorised personnel.”

To date, Amthal Fire & Security’s installation and maintenance teams have completed install works at the head office in Kings Cross and at the West London office in Hammersmith, in addition to new housing development connections.

Visual data

The new surveillance technology is created to offer alerts when instant action is required and based on what’s identified as a threat. Visual data can be accessed anywhere at any time and on any device. It can also be shared immediately and saved for up to 12 months if required, with 30-day delete options as standard in order to comply with the GDPR.

Crucially, the data is only accessible to authorised personnel, all of whom have audit control capability for full compliance.

Stephen Bates, CEO at Cloudview, observed: “Notting Hill Genesis is committed to providing safe and secure communities in which residents can thrive. Equally, the client is very clear on its responsibilities to its team members who are at the heart of these communities. The need for smart surveillance technology that can be centrally managed is integral. We were delighted to offer a solution that could bring these requirements together. With the help of Amthal Fire & Security, we have enabled a seamless installation process between all Notting Hill Genesis’ offices and housing developments.”

NHGCloudview

Phil Bryant, manager of the strategic accounts team at Amthal Fire & Security, added: “At the heart of social enterprise is the overriding need to create homes and communities in which residents want to live, with management taken care of by the dedicated local teams employed by Notting Hill Genesis. The organisation now has smart systems in place to ensure ongoing safety and security.”

Bryant continued: “The Cloudview system installed by Amthal Fire & Security, with both of us operating in constant collaboration, has proven to offer best value and significant efficiency savings that can be maintained to ensure ongoing compliance and simple maintenance plans. It also allows Notting Hill Genesis staff to have a much more reactive and instant approach to any threat identified, thereby affording total peace of mind.”

Leave a comment

Filed under Security Matters

Hanwha Techwin focuses on Top 5 Video Surveillance Trends for 2020

Hanwha Techwin, the supplier of IP and analogue video surveillance solutions, has put forward its Top 5 key trend predictions for the security industry in 2020. These include Artificial Intelligence end-to-end security solutions, cyber security, cloud-based data insights, privacy protection and vertical specialised solutions.

Artificial Intelligence End-to-End Security Solutions

As Artificial Intelligence becomes more broadly adopted across industries, it’s likely to be more widely incorporated in video surveillance in the upcoming year. Edge-based Artificial Intelligence (which filters and processes data locally on a camera) will be more ubiquitous, enabling end-to-end Artificial Intelligence technology.

Today, most security cameras send the data they collect to servers to be analysed. However, with edge-based Artificial Intelligence, the data is first analysed by the camera and subsequently sent to the server. This reduces the burden of transferring and storing large amounts of data to a server, thereby increasing efficiency, saving time and reducing server costs typically required to analyse data.

HanwhaTechwinSurveillanceTrends2020

In 2020, Hanwha Techwin will introduce edge-based Artificial Intelligence cameras, as well as Artificial Intelligence-powered NVRs and VMS so as to bring to market end-to-end (camera to storage server and VMS) Artificial Intelligence security solutions.

Cyber Security

With Internet of Things (IoT) devices becoming ubiquitous, the importance of cyber security has never been more prominent that it is today. Today’s cyber attacks are more intelligent and advanced than ever before, so building cyber-resilient security systems is no longer an option, but an imperative.

Smart Cities, factories, financial institutions and retailers require scaleable video surveillance solutions which are closely interconnected with other devices and networks, making the importance of cyber security paramount.

Strong cyber security has always been Hanwha Techwin’s priority and the company has been refining its technology to suit ince the beginning. The soon-to-be released Wisenet 7, the newest version of Hanwha Techwin’s own System on Chip, has been designed with the strongest cyber security features including a secure booting function and signed firmware for both software and hardware. Validated by the UL Cyber Security Assurance Program certification, Wisenet 7 ensures that end users have access to the industry’s most advanced cyber security features.

Cloud–Based Data Insight

According to IDC, the provider of IT-focused market intelligence, there will be about 175 zettabytes of data in the world by the year 2025, with much of it stored in the cloud and Data Centres around the world. At the same time, video surveillance solutions will go far beyond functioning as a simple monitoring tool to become an indispensable aid to organisations by providing useful insights that improve business operations.

The importance of accessible cloud-based servers that can easily store and analyse the accumulated data will also increase. Going beyond being an efficient storage repository, sophisticated analytics will use cloud processing to analyse the stored data and provide practical and timely insights. 

In 2020, Hanwha Techwin will introduce cloud-based solutions beginning with the Device Health Monitoring Cloud, which will monitor and manage video surveillance devices in real-time. The company will also introduce Retail Insight Cloud which is designed to facilitate store management.

Privacy Protection

Together with cyber security, Hanwha Techwin believes that the protection of personal data should be integral to the business ethics of a video surveillance company. By its very nature, the video data that’s collected for security purposes almost always contains private information. Therefore, protecting surveillance data is imperative.

Around the world, privacy protection laws are being introduced, such as the General Data Protection Regulation (GDPR) in Europe and the Federal Information Security Management Act in the US. The California Consumer Privacy Act is also set to come into effect in January 2020.

These laws will force the video surveillance industry to follow ‘privacy by design’ Best Practice and renew all efforts designed to protect personal data from misuse and abuse. Organisations are increasingly aware of the dangers of private data breaches and they’re becoming more discerning when choosing security products and solutions.

Hanwha Techwin provides a solution with Video Privacy Management technology and has released its Smart Cover of Privacy line-up to comply with the GDPR globally.

Vertical Specialised Solutions

Vertical markets in the security industry are increasingly requiring more specialised devices and solutions that meet unique requirements. With the emergence of the fourth industrial revolution, the presence of smart verticals will be more prominent and video surveillance companies must be ready to provide solutions for Smart Cities, factories, transportation and retail organisations.

SoonHongAhnHanwhaTechwin

Soon Hong Ahn

Hanwha Techwin already provides products for these verticals and plans to expand its line-up of specialised solutions in the very near future to include asset management solutions with IoT technology.

“Advancement in technologies such as Artificial Intelligence, the IoT and the cloud will support new use cases in conjunction with existing devices and solutions to meet customers’ needs in various verticals, expanding the horizon of our industry,” said Hanwha Techwin’s president and CEO Soon Hong Ahn. “However, we must also be mindful of the social and ethical responsibility related to areas such as cyber security and private data protection. Sustained interest and investment in these areas must be regarded as an obligation to make sure our industry continues to thrive in the midst of rapid technological advancements.”

Leave a comment

Filed under Risk Xtra

KnowBe4 study reveals 92% of organisations’ biggest security concern is end users

KnowBe4, the provider of the world’s largest security awareness training and simulated phishing platform, has released the results of new research. The company’s report examines over 350 organisations globally and reveals the security weaknesses and concerns within them. On average, 81% of organisations had some degree of concern around security issues.

Cyber crime continues to evolve and become more sophisticated. Artificial Intelligence and machine learning are leveraged by many criminal organisations to help them better understand how to improve their attacks and they’re now targeting specific industry verticals, organisations and even individuals.

Increases in the frequency of ransomware, phishing and crypto-jacking attacks have been experienced by businesses of nearly every size, vertical and location.

KnowBe4

When it comes to attack vectors, data breaches are the primary concern, with credential compromise coming a close second. These two issues go hand-in-hand as the misuse of credentials remains the foremost attack tactic in data breaches. That’s according to Verizon’s 2018 Data Breach Investigations Report.

Phishing and ransomware ranked next, demonstrating that organisations are still not completely prepared to defend themselves against these relatively “old” attack vectors.

Other key findings

*92% of organisations rank end users as their primary security concern. At the same time, security awareness training along with phishing testing tops the list of security initiatives that organisations need to implement

*Organisations today have a large number of attack vectors to prevent, monitor for, detect, alert and remediate. In terms of attacks, 95% of those organisations surveyed are most concerned with data breaches

*Ensuring security is in place to meet General Data Protection Regulation (GDPR) requirements is still a challenge for 64% of organisations, despite the GDPR’s fine details having been public knowledge for quite some time

*Attackers’ use of compromised credentials is such a common tactic. 93% of organisations are aware of the problem, but still have lots of work to do to stop it

*When it comes to resources, 75% of organisations don’t have an adequate budget

“2018 was a prolific year for successful cyber attacks, with many of them caused by human error,” said Stu Sjouwerman, CEO of KnowBe4. “IT organisations are tasked with establishing and maintaining a layered security defence. The largest concern, as demonstrated again in this report, is employees making errors. Organisations must start their defence by establishing a security culture. In order to combat the escalation of social engineering, they absolutely have to ensure that users are trained and tested.”

To read the full report visit www.KnowBe4.com

Leave a comment

Filed under Risk Xtra

“Lack of strategic focus on technology at Board level” finds ICSA poll

A poll conducted by ICSA: The Governance Institute and recruitment specialist The Core Partnership reveals that just 51% of Boards of Directors understand the challenges and opportunities that data and technology present to their organisations. Some 29% of the company secretaries who took part in the survey think that their Boards do not fully understand and a further 20% could only attest to ‘maybe’.

A lack of knowledge is viewed as the main barrier that prevents Boards from engaging properly with technology at a strategic level. Some 58% of respondents consider this to be the main obstacle, with 22% alluding to another reason, 16% citing language as an impediment and 4% blaming the on-boarding process.

Some of the main issues raised are as follows:

*The speed at which technological advances move means key aspects of the technology journey may not be provided in a timely manner

*It’s hard to find time in busy agendas to focus on the technology aspects

*Most Boards are made up of people who are of a generation that do not really understand the possibilities and threats offered by technology

*There has been a focus on the General Data Protection Regulation (GDPR) and cyber security, but that focuses on risks rather than opportunities

*Challenges arising from data management are more readily understood (eg the impact of poor data quality), but the real opportunities available to organisations through the effective use of data are less well considered (and especially through the ‘lens’ of commercial strategy)

Peter Swabey

Peter Swabey

Artificial Intelligence and automation

When asked if there were particular areas in which Boards needed to improve their understanding, a quarter of respondents chose Artificial Intelligence and automation. Other areas highlighted for potential improvement were using data effectively, the GDPR, cyber security and IT governance. Some 23% of respondents stated the belief that their Boards need to hone up on all of the areas mentioned.

Peter Swabey, policy and research director at ICSA, said: “The pace of change is such that new technology is emerging quicker now than at any time previously. This can be challenging for all Boards, but particularly so for those predominantly made up of people who are not ‘digital natives’. On top of this, changes in corporate governance, data privacy requirements and regulation mean that it can be difficult for non-executive directors to maintain an adequate level of knowledge across all areas. While it’s incumbent upon directors to proactively seek to expand their knowledge, there are time limits on what’s achievable given the part-time nature of the role.”

Swabey added: “It might be suitable for some organisations to have an IT specialist sit on the Board, but this wouldn’t be appropriate for all. Moreover, having one director with responsibility for technology might allow others to obviate their responsibilities, which is clearly not an option. As one respondent quite rightly said: ‘Technology is both an opportunity and a threat – Boards need to understand how it impacts the business both operationally and strategically’. This is a responsibility that all directors must share.”

Leave a comment

Filed under Risk Xtra

Genetec unveils product line-up for Security Essen 2018

Genetec, the manufacturer of unified security, public safety, operations and business intelligence solutions, has announced its show line-up for Security Essen 2018. In its 21st year of delivering global innovation for physical IP security, Genetec will demonstrate Security Center (its scalable, open architecture security platform that unifies video surveillance, access control, ANPR, communications and analytics. The company will also feature its family of security infrastructure appliances and host no less than 11 industry technology partners on its stand, all of them demonstrating their technology integrations and support for Security Center.

Security

Visitors will be able to see the latest features in Security Center (v5.7), including its IP video management system (VMS) designed to scale and adapt to the evolving needs of the security market. This latest version also features enhanced privacy protection, designed to help end users comply with the General Data Protection Regulation’s (GDPR) data privacy and confidentiality mandates, along with a new reporting feature that automatically alerts system administrators to outdated camera firmware.

GenetecSecurityCenter

Genetec will demonstrate its Streamvault turnkey security infrastructure appliances, pre-installed with Security Center to offer a simplified software delivery system. In addition to video surveillance, access control and ANPR support, Streamvault also now provides certified performance with KiwiVision Privacy Protector (a core module in Security Center) that dynamically anonymises video to support GDPR compliance for public and private video surveillance environments.

Genetec will also demonstrate how customers can easily migrate their legacy access control systems to a unified Security Center platform.

Privacy and cyber security

Committed to maintaining the highest levels of privacy protection, Genetec continues to inform IT and security professionals on both cyber security and privacy practices. The company has recently launched the Genetec Trust Center, a central repository of educational materials focused on cyber security, privacy and Security-of-Security topics to help system integrators and end users mitigate risks via trusted Best Practice.

“With our growing presence in Germany, Genetec is happy to bring its many innovations to Security Essen this year,” said Nick D’Hoedt, regional manager for the Benelux and DACH at Genetec. “We will show our customers and partners alike how they can unify their security platforms into a scaleable model that offers one solution through a single interface for improved operational efficiency, adhering to the highest standards of GDPR-compliant data privacy. We’re also proud to welcome 11 of our top technology partners from our growing ecosystem of camera, access control, sensing and software vendors.”

Operations

Also on display will be Genetec Mission Control, a collaborative decision and event management software that provides organisations with new levels of situational intelligence, visualisation and complete incident management capabilities.

Genetec Partner Pavilion

As stated, Genetec will host 11 of its technology partners in individual demo pods on the stand at Security Essen. Each partner will demonstrate their hardware and software integrations with Security Center.

Featured sponsors include Bosch, Edesix, MOBOTIX, OPTEX, Panasonic, Quanergy, Siklu, Southwest Microwave, SimonsVoss, The Safe Group and Schréder. 

All show attendees are invited to visit the Genetec Stand (G30) in Hall 5 at Security Essen 2018.

Leave a comment

Filed under Risk Xtra

Critical infrastructure and Government GSOCs drive CNL Software’s IPSecurityCenter V5.7 PSIM

CNL Software, the Physical Security Information Management (PSIM) system software specialist, has announced the release of IPSecurityCenter V5.7. This latest release includes many feature enhancements that increase performance and reduce operational response times in large-scale, multi-sited and mission-critical deployments of IPSecurityCenter and will benefit those in the transportation, corporate security and public safety markets.

According to CNL, IPSecurityCenter leads the Global Security Operations Centre (GSOC) market for PSIM. This latest release improves CNL Software’s ability to manage across multiple Security Operations Centres (SOCs) and GSOCs, keeping the entire operation in harmony using enterprise wide visualisation to support the overall security mission for critical infrastructure and large-scale Government security programmes.

“We continue to invest heavily in developing the features that customers, partners and industry leaders inspire us to create,” commented Simon Knightley, CTO at CNL Software. “We listen to our customers and understand what’s important to them. Their ideas help us to innovate new ways in which to support them in making the GSOC a faster and more effective hub for all mission-critical security and life safety-related activity. They want their Control Rooms to see more, act faster and collaborate better throughout the whole organisation, which we help them to achieve using IPSecurityCenter V5.7.”

CNLPSIMV57

CNL states that the V5.7 release differentiates CNL Software from other PSIM vendors and establishes IPSecurityCenter as the first choice PSIM solution for large-scale Government security programmes, critical infrastructure and facilities protection.

Some of the main enhancements within the new release include:

*More scalable for larger deployments: Enhancements support greater control over large-scale federated solutions, driving tightly managed GSOC operations
*Faster and more responsive: Improvements include faster access to historic alarm data with fewer clicks and rapid access to video from remote locations
*Support for 64-bit video: This ensures IPSecurityCenter leverages the latest developments in video technology and multi-thread processing for faster and more scalable solutions
*General Data Protection Regulation (GDPR)-ready security platform: Enhancements ensure that IPSecurityCenter is ready for the most demanding compliance processes, with security features such as two-factor authentication included such that there are no unauthorised changes to the system
*Improved decision support: Developments include new interactive dashboards that allow operators to access key performance indicators in real-time using a customisable device that can highlight alarm, human and machine data alike

Leave a comment

Filed under Risk Xtra

95% of UK businesses “still struggling” with mobile working as security of data continues to cause concern

Apricorn – the manufacturer of software-free, 256-bit AES XTS hardware-encrypted USB drives – has unveiled new research results highlighting that 95% of organisations surveyed in the UK recognise problems with mobile and remote working. Worryingly, nearly one-in-five (18%) suggest that their mobile workers don’t care about security.

All (ie 100%) of those IT decision-makers surveyed noted that they had employees who work remotely at least some of the time, with an average of over one third (37%) of staff members who do so. With an increase in the numbers of people working remotely, this means more data moving beyond the confines of the corporate network. Organisations need to ensure that any data – be it at rest or on the move – remains secure.

While many are taking steps to ensure their data is protected, for instance by implementing security policies for mobile working and Bring Your Own Device, just under half of respondents (44%) still agree that their organisation expects their mobile workers to expose them to the risk of a breach. Roughly one third (32%) say that their organisation has already experienced a data loss or breach as a direct result of mobile working, while 30% of respondents from organisations where the General Data Protection Regulation (GDPR) applies are concerned that mobile working is an area that will most likely cause them to be non-compliant.

MobileWorkingSecurity

53% cited that one of their Top Three biggest problems with remote working is due to the complexity and management of the technology that employees need and use. Over half (54%) say that, while their organisation’s mobile workers are willing to comply with requests relating to security measures, employees lack the necessary skills or technologies required to keep data safe. Nearly one third (29%) take the radical approach of physically blocking all removable media, while a further 22% ask employees not to use removable media (although they have no technology means by which to enforce this).

“The number of organisations blocking removable media has increased compared with responses to the same question in 2017, when 18% said they were physically blocking all removable devices,” said Jon Fielding, managing director for the EMEA at Apricorn. “A unilateral ban isn’t the solution and ignores the problem altogether, while also presenting a barrier to effective working. Instead, businesses should identify corporately approved, hardware-encrypted devices that are only provided to staff with a justified business case for having such. The approved devices should then be white-listed on the IT infrastructure, blocking access to all non-approved media.”

Risk of data breaches

Despite strict security policies, mobile working can still leave organisations wide open to the risk of a data breach. Half (50%) of respondents admitted one of the three biggest problems with mobile working is that they cannot be certain their data is adequately secured. Only around half enforce and are completely confident in their encrypted data in transit (52%), in the cloud (52%) and at rest (51%).

“While the new GDPR legislation requires the ‘Pseudonymisation’ and encryption of personal data, encryption isn’t a new concept, and keeping data secure has always been imperative to any organisation handling sensitive information,” added Fielding.

In conclusion, Fielding stated: “Organisations are simply not following security Best Practice. They need to implement and enforce policies and provide employee training to ensure compliance with the GDPR. Failing to put processes in place is putting confidential data at risk. Organisations now face the prospect of being fined even before a breach has occurred.”

Leave a comment

Filed under Risk Xtra

Norbain set to launch “industry-first” Virtual Event on Tuesday 5 June

Norbain will be launching its first Virtual Event on Tuesday 5 June. The online event has been developed such that ‘visitors’ can benefit from all the advantages of a physical exhibition, but at a time and place convenient to them.

As is the case with a physical event, visitors will be able to keep up-to-date with the latest developments in the industry, speak with suppliers, network, watch videos and presentations and use their ‘event bag’ to take away useful resources.

In addition to being able to visit supplier’s stands, the Virtual Event will give visitors the opportunity to watch a range of presentations from industry experts focusing on the subjects of cyber security and the EU’s General Data Protection Regulation.

NorbainVirtualEvent

Mark Field, commercial director for Norbain SD, commented: “We’re continually looking for new and innovative ways in which to deliver value to the industry and facilitate the sharing of information between all parties. Although physical exhibitions and roadshows are still relevant, it’s becoming increasingly challenging to justify the time and expense involved for visitors and suppliers alike. Face-to-face networking will always be a part of our strategy, but the Virtual Event allows us to offer a very accessible alternative.”

The launch event is “just the beginning”. Norbain will be using the site across the year to run a range of events on a number of different themes, all of them focused on topics that are key to the industry. Even when the platform is not being used to run live events, it will still be available to visitors, subsequently allowing them to take advantage of a great range of resources (among them the dedicated Cyber Security Zone).

*Register for the Norbain Virtual Event by clicking here

Leave a comment

Filed under Risk Xtra, Uncategorized