Security Starts At Home
from the nobody-knows-nothing... dept
With all of the well hyped security breaches of the last month, politicians are springing into action with all sorts of regulations and ideas -- most of which won't do much good, but should get their name in the paper a few times. Unfortunately most of the legislation they're talking about deals with the "after-the-fact" impact of security breaches, rather than encouraging better data protection at companies. A new survey of security professionals shows where part of the problem is. It turns out that many security professionals have no clue about the state of their own company's data security. 27% claimed they didn't know if the company's security had been breached. 16% of those responding said they knew their company had security holes, but they hadn't had a chance to go looking for them yet. You can certainly poke holes in the study (just because you're a security professional doesn't mean you need to know all aspects of the company's security, for example), but it really does sound like there are a lot of companies out there who just don't take the security of the private data they hold very seriously. Fixing this won't stop security breaches, of course. And even if you build the Fort Knox of data security, someone will figure out a social engineering way to get around it -- but that doesn't mean these companies shouldn't be doing a much better job of protecting our data. Considering these companies are storing our data, why couldn't people pull a poor man's Transparent Society and demand a security audit at some of these companies to make sure their own data was safe?
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
