How was business for you last year ? It was a rough time for a lot of people. 2010 we are still crawling towards that recovery. What makes it worse is the countless number of opportunists purporting to offer a solution to your financial crisis or a new business opportunity to get you working again.A big tip off that won't be what seems is when they make claims like "Fabulous business
The Changing Landscape of Information Access
Helping Businesses Make Wise Choices
Every business using technology should recognize that the rules regarding information security are changing.
Conceptually, cloud computing creates new challenges for information security professionals, because sensitive information may no longer reside on dedicated hardware. Where physical security was once a primary element of data access, virtualized services and remote accessibility have redirected the discussion to more ethereal areas.
How can enterprises protect their most sensitive data in the rapidly-evolving world of shared computing resources? Vulnerabilities have been found in the cloud and software-as-a-service models, raising the question of cloud computing's impact on security and the steps that will be required to protect data in cloud environments. Particularly when it comes to integration of services and data sharing amongst cloud solution providers, who, exactly, is in control?
While the concepts of centralized processing, shared computing resources, and subscription-based services are not at all new, many of the technologies being applied today are new. When we consider the fact that new vulnerabilities are still being discovered in older software and systems, why would we assume that new cloud computing tools and services would be immune?
Cloud computing and software-as-a-service technology models often shelter the user from the realities of the systems (hardware, software, networking, etc.) that comprise the service. Before investing your business in a fully cloud-based solution, make certain that you fully understand your risks and how they might be mitigated.
As Sun Tzu wrote in the Art of War, " If you know the enemy and know yourself, you need not fear the result of a hundred battles. If you know yourself but not the enemy, for every victory gained you will also suffer a defeat. If you know neither the enemy nor yourself, you will succumb in every battle."
Make Sense?
J
Equine Accounting: NewSecurity of Information Law in MA
Does your business accept checks or credit cards?
If your business accepts checks or credit cards from Massachusetts residents, this article is definitely for you. Even if you live in a state where there are currently no requirements for this type of security, something similar may be coming to your state soon. So see what plan Massachusetts is putting into place. No matter where your business is located, safeguarding your customers' personal information just makes good business sense.
Effective March 1, 2010, every organization who collects, owns or licenses personal information about a resident of Massachusetts should be in full compliance with 201 CMR 17. This new personal data protection law establishes a standard set of regulations for businesses to protect and store Massachusetts residents' personal information. Personal information is defined under the new regulation as a resident's first name and last name, or first initial and last name, and one or more of the following:
· Social Security number· Driver's license number or state-issued ID card number· Financial account number (bank account number) or credit or debit card number (with or without any type of security or access code or password).
So this law applies to ANY BUSINESS, regardless of size, who accepts checks or credit cards.
The law requires companies to develop and implement several security safeguards, including:
· A comprehensive written information security plan (WISP) creating effective administrative, technical and physical safeguards of personal information.· Protection against any anticipated threats or hazards to the security or integrity of personal information (such as restricted physical access, computer passwords).· Policies regulating employees' ability to access and transport records outside work.· Disciplinary measures for violations of these new safeguards. MGL Chapter 93A, section 4 specifically "authorizes the Attorney General to seek injunctive relief against the organization involved in the unauthorized act or practice and allows a court to impose a $5,000 civil penalty for each violation". If "violation "is interpreted to mean the unauthorized access to a single individual's personal information, potential damages could be enormous.
It's not as daunting a task as it sounds. Most of the procedures are fairly simple to implement. Here are links to the law and WISP guidelines.If you would like more information or assistance, you can contact a private company who specialize in helping you implement an acceptable plan.
Thank you to David Javaheri at http://r20.rs6.net/tn.jsp?t=zlc7kgdab.0.0.tnz777cab.0&ts=S0464&p=http%3A%2F%2Fwww.compliancehelp.net%2F&id=preview for his help with this article.
If your business accepts checks or credit cards from Massachusetts residents, this article is definitely for you. Even if you live in a state where there are currently no requirements for this type of security, something similar may be coming to your state soon. So see what plan Massachusetts is putting into place. No matter where your business is located, safeguarding your customers' personal information just makes good business sense.
Effective March 1, 2010, every organization who collects, owns or licenses personal information about a resident of Massachusetts should be in full compliance with 201 CMR 17. This new personal data protection law establishes a standard set of regulations for businesses to protect and store Massachusetts residents' personal information. Personal information is defined under the new regulation as a resident's first name and last name, or first initial and last name, and one or more of the following:
· Social Security number· Driver's license number or state-issued ID card number· Financial account number (bank account number) or credit or debit card number (with or without any type of security or access code or password).
So this law applies to ANY BUSINESS, regardless of size, who accepts checks or credit cards.
The law requires companies to develop and implement several security safeguards, including:
· A comprehensive written information security plan (WISP) creating effective administrative, technical and physical safeguards of personal information.· Protection against any anticipated threats or hazards to the security or integrity of personal information (such as restricted physical access, computer passwords).· Policies regulating employees' ability to access and transport records outside work.· Disciplinary measures for violations of these new safeguards. MGL Chapter 93A, section 4 specifically "authorizes the Attorney General to seek injunctive relief against the organization involved in the unauthorized act or practice and allows a court to impose a $5,000 civil penalty for each violation". If "violation "is interpreted to mean the unauthorized access to a single individual's personal information, potential damages could be enormous.
It's not as daunting a task as it sounds. Most of the procedures are fairly simple to implement. Here are links to the law and WISP guidelines.If you would like more information or assistance, you can contact a private company who specialize in helping you implement an acceptable plan.
Thank you to David Javaheri at http://r20.rs6.net/tn.jsp?t=zlc7kgdab.0.0.tnz777cab.0&ts=S0464&p=http%3A%2F%2Fwww.compliancehelp.net%2F&id=preview for his help with this article.
Subscribe to:
Posts (Atom)
