Information security hole in 2009 is: a threat to our country and financial securityEvery responded a few days yet another security breach information. And may be every breach of the largest, has announced to the other. It is widely recognized now by security experts from the federal government down on the problem of data security breaches get worse as the debacle worsens and financial companies to cut costs and workers. Finally, there is growing awareness of our team’s biggest concern is: it is inevitable that this agreement be used for terrorism data. As our security master, corporate governance and regulatory experts, privacy advocates, directors and officers, corporate counsel, including managers interested in talking with people involved, and lawyers that plaintiff and class action, many of the questions about us something something about leadership. Help explain the failure to respond to national security information secret and secure global threat, and the other shareholder derivative, director and officer liability, regulatory, consumer product safety, and the class action issue. Information Security is a potential breach of national security and homeland LW global issue is? Do: Think about what data bandit with stolen information. bandit, drain your financial accounts data, that a fraudulent debit and credit cards, and use of credit using your identity to open new accounts, forged documents and other legal paperwork to create jobs and to crime and identity theft to use law enforcement to avoid. It is inevitable that some of the information stolen and used to finance terrorism, and mock terrorists or allow them to cross-border access system to identify critical. This is what makes the current situation is worse than Enron and WorldCom fraud global situation. Enron was, but noted quotes about losing dollars. In the current crisis, we lost the data on a massive scale we have not even begun to understand. You said a breach of any class action information security exist, product liability builds consumer, shareholder derivative, D & O liability, and regulatory risks. Explain. : LW when sensitive information and systems companies, they have certain obligations to protect that information. The obligations based on diversity, federal and international laws, state regulatory requirements and guidelines from government agencies, statements and representations made to shareholders, customers, consumers and regulators, and customers, consumers and agreements with other companies to which they business. When companies can not meet the needs of information security, whether intentionally reducing or recklessly, failed in their obligations many stakeholders. In addition, many of the statements available to interested parties but not true enough. You situation seems to many airline security requirements, with the feeling and can represent various stakeholders to ensure that it meets the safety requirements of works. If the airline complies with safety standards on safety standards, whether through negligence or through deliberate around fails, the corporate law enforcement is a major problem for regulators, customers, shareholders, and class action Plaintiffs. Those who ridiculed security, is also a major problem as far as control your personal liability. The company and those who have more problem if the actual plane crash. I have a plane that crashed as considering information security breach. What are the implications for investors: LW? Implications including the loss of shareholder value to investors if the company is in breach of information security. Own companies in industry standards and the company filed with the SEC, including recognition revelation that a data security breach affecting the brand, incident response, remediation, auditing requires huge financial resources, and legal costs, insurance and increased costs. So obviously that means that information security breach, security and trying to manage risk, despite hundreds of millions to spend, the system failed somewhere. – Implications on whether the company failed its own security obligations, or whether to find the company to meet these obligations depends to follow. By proper control of the company blew, that, essentially, the company did not tell the truth in the stakeholders involved enough. Misrepresentation of the issues may mean that the voided insurance coverage, legal and regulatory requirements including Sarbanes-Oxley, were not together, and the company’s performance and safety requirements for people note that much or if The company was up in compliance with its relevant obligations security. The regulatory action, shareholder derivative suits, individual directors, officers sanctions against claims, and managers, and consumer class action shareholder suits for the mature status, and criminal. Why are consumers back when their personal and financial information:? LW cross my experience, unfortunately try always to push all the risk to the financial industry, and the results of information security breach on the person, the consumer, although it does with other companies or businesses. I believe to be wrong – if the company failed to meet their financial needs, at least some of the blame – not the bandit, personal data, bear, sure, get out the back. Also, if it must be security, finance company, a total breach immediately, rather than consumer or customer of the cost passed on the cost and inconvenience should have failed. I also believe that financial companies do not comply with safety standards on unfair interest rates, late fees and other penalties, and aggressive collection practices on their clients in trying to implement a very suspicious situation. In criminal hackers, which system, for example, the bandit steal data or to criminals who break into’ve hearing a lot about, on a laptop or flash drive. Information security gaps so about you:? Without directly talking LW. Problem based on experience in life that I have described the piece, many in the financial industry security standards yet ignore or bypass did everything they said they could possibly companies, and responsible then when that information security breach. It is easy to break into corporate systems mean age of computer hackers and data theft at fault. But that is only part of the problem. Yes, data bandit committed these criminal acts, and it is reasonable that the data that the bandit blamed for their actions. Vendors also be extremely irresponsible companies products or services – that’s a problem, as well as providing such fault. But many other parts of the financial companies of their obligations to protect and information systems. Responsibility for financial industry companies to allow other companies or individuals using the data before due diligence and takes appropriate security review. Financial companies claim they are the best they can make a storage company that tells its customers a secure fence, security alarms, and 24 – hour guard on the site as a break But, because of left to go to protect a neighborhood pub, and the gate opened and left out the alarm. If your luggage is stolen, the person at fault for the thief, but the company is in trouble and overcome security guards. Financial companies are legally LW data and systems? Need to ensure your safety: Yes, financial companies are not legally required to protect this information. There are many laws and regulations that force requirements. (Specific laws and regulations, the industry will change the company type, and the type of information) but the difference is that I am describing arise because many companies, and accept the other stakeholders, that companies are meeting. safety standards as they spend a lot of money to protect shareholders. without Own companies, not to mention regulators and other concerned parties, can not understand that the gaps, or to find them and settle. He explained that well, because until recently, almost any person relating to the financial industry, refusing to greenlight rioscúil deals had no appetite – they focused on the extent and speed of transactions dealing. Sensitive information approach ‘to credit default swaps. How this difference? LW does not occur: many of the gaps in the process of managing deals and deal making that happen. Many laws in the financial industry well, is about the regulations and safety standards, and has for years. Industry trade groups and companies, however, specify the security review is done before the right to complete any deal with sensitive systems and data to the transaction in question to use. Aviation industry needs to consider this as security checks before the plane takes off is supposed to be finished. This means that the flight crew keep an eye on things, but the plane should not land until it is registered and approved by experts. Now, in fact, many in the financial industry projects that the pressure, the agreement is approved, other companies before giving access to sensitive data security review completed and addressed the deficiencies. A security check before completing the air as to where a plane, or carry out a program than we ‘or’ taking security checks too much time is needed for other reasons. The contract transaction and apply the control points is strong and effective for industry to be one – it past the best ‘deal’ before the safety of aircraft must meet the standards that takes away the opportunity. Unfortunately, the financial industry’s focus on volume and speed of transactions, in my experience it is often one of the team is weaker that the safety standards, or do not understand the verbiage used by deals contract. Many in the financial industry as a drill paperpushing treatment due diligence and Deal Festival to do as cheaply and quickly. Inspector is not only unable to verify the safety of aircraft at the aircraft itself was out of Czech, but really do not know what words mean that the security checklist. LW you? How do I know: I got a deal, sensitive systems and data for the three international financial organizations, including. With global organizations subsidiary banks, mortgage companies, insurance, financial advisers, and includes credit cards. I also have experience in other global financial companies with various colleagues. It is a huge problem and the industry-wide demand attention. Well if you worked in the financial industry, and now you say the industry is not doing its work, in that change:? LW I always work through the system and sensitive information, including major international financial companies, you do not work safe. Was not knowing how to find the job in question and the problems, the industry is the volume and pace of deals common skill properly paid. Sometimes it even to greenlight projects until proper security safeguards in place were included forbidden. While this work was respected more control of staff, information security, an option obligations, corporate governance experts, it was sometimes necessary precautions for the teams through the project without the time popular with the crowd did not want . So many stakeholders that it is a big security hole to educate, but it is fixable – I have it. Why do I care so much about you? What do you LW?: As is now out, my whole life, his first job at the beginning of the information S. U. Military weapons are, the protection and proper distribution of sensitive data has been. In our units, systems very sensitive to people, had the defense ready to die compromise our security and our people can cause serious damage.
Laura Wilson, Information Security – resources. Com editor of the corporate liability. Laura is a business consultant and the information security, consumer protection, an advocate for long-term shareholder value, and better management decisions. His specialty risks to find and fix and threats to sensitive data. Experience, international banking, credit cards, and mortgage companies, venture capital portfolio companies, including software and technology providers. During the tech boom and recession in Silicon Valley practice law firm handling the administration and information security.