Thursday, May 10, 2007

Information Insecurity

100,000 people had their security breached because an institution did not practice adequate security. This kind of breach is terrible even if it doesn't lead to actual issues with the individuals whose information has been compromised.

The risk, of something happening to any individual security office has gone up. How many of them would need to be compromised for there to be a serious security breach?

Not to mention that the TSA officers that have weapons information were listed on the hard drive as well. It really isn't that hard to find employee types and determine which ones could be holding guns, despite some articles stating that the TSA indicates it would be difficult to determine.

It doesn't matter how difficult to determine it is, whoever has the drive has it indefinitely.

Basic questions the TSA has been asked about this drive that they don't know. They don't know if it was encrypted. How can they not have anyone who knows if that drive was encrypted or not?

It isn't like only a few people have been affected by security breaches. I am a veteran and was notified during the last major breach that my information was lost. Fortunately, it was recovered by luck.

But where is the liability on the part of these institutions? Unencrypted personal data. Unsecured laptops outside of secure facilities. Portable hard drives with 100,000 records of private information?

The government needs to make new rules in regard to information security. It won't be the grunt terrorist that gets us in the future, it'll be an information leak that affects thousands of people and then they all go to capitol hill to complain.

Reference Article: Air Marshall info among 100,000 records lost on TSA Hard Drive

No comments: