Category Archives: Confidential Shredding

6 Steps To Improve Your Data Security

Posted on by
Reply

privacy-data-security

Data is King. Protecting your data comes in many forms. Your confidential document shredding specialist will securely destroy any sensitive documents. Data protection is equally important as data destruction. IBM are a leading High Tech company and provide you with relevant information and software to improve your security.

IBM Security solutions for data security and privacy provide a holistic approach that helps prevent data loss while enabling data access to support business operations, growth and innovation. These solutions help you ensure regulatory compliance, defend against internal and external attacks, and can lower storage and data management costs.

IBM Security solutions for data security and privacy enable a layered approach to achieving data security that helps you:

  • Understand and classify sensitive data: Understand where data resides, how it is related and how to define security and privacy policies. What data is sensitive and what data is not must be established.
  • Assess vulnerabilities: Detect database vulnerabilities and harden repositories. Be aware of paper data is stored. Add a lock to a room or cabinet to add an extra layer of security.
  • Monitor and audit: Monitor transactions to enforce policies and capture a detailed audit trail. Any printed documents with sensitive data must be destroyed once the document life cycle is complete.
  • Prevent unauthorised database activities: Block, quarantine or mask transactions that violate policy. With paper data limit who can access sensitive data management or senior staff.
  • Protect sensitive data: Encrypt structured and unstructured sensitive data, mask or redact sensitive data in documents and forms, and encrypt data in storage.
  • Manage access: Manage privileges and authenticate users to limit data access.

IBM also provide a free software for you to assess and detect vulnerabilities. The software will detect weak passwords, any misconfiguration on your database. Read more about it here: https://www-03.ibm.com/software/products/en/security-guardium-vulnerability-assessment  

While IBM methods deal with digital data the crossovers and similarities can be applied to your paper data. Paper shredding services will also offer digital data protection and knowledge. Knowing these risks and implementing the steps to prevent a data breach will benefit your business or organisation in the long run.

Technology terminology can be confusing to understand but implementing security measures for digital devices is pretty straight forward. For more information on a data protection and security please contact us or visit our site for more information.

Organising Paper, Sensitive Data & Clear Out Shredding

Posted on by
Reply

clear out paper shredding

Secure Document Shredding specialists are recommended for large quantity clear out shredding. That being said it, happens to the best of us, we get a document and say “I’ll deal with it later” and set the document aside. We go back to our work and another document will be given to us or another one is added or set aside. It doesn’t take long before a pile starts to build and the less likely that pile gets dealt with. When we decide to deal with it, the pile has become a more daunting task to clear

If the pile is not organised there is a danger of confidential or secure documents being lost in the pile and data breaches can occur if gotten into the wrong hands.

Ideally setting up an organisation plan before the clutter starts to build makes it easier to implement this process. Clutter for one is an eye sore. Its messy, not organised and can cause stress to you and your office

The dread comes from knowing you need to deal with it, but not necessarily knowing exactly how to deal with the quantity and feeling overwhelmed by what feels like an enormous task.

A single piece of paper is easy to deal with but this post is more to deal with when a pile has accumulated into clutter stack.

Knowing and separating your confidential documents is a starting point. View our What to Shred list and see what documents can contain sensitive data.

Daily & Weekly Paperwork Routine Is Essential To Long-Term Paper Organisation & Reducing Risk Of Data Breach

Actions such as: (1) bin it right away; (2) delegate it to someone else; (3) file it for future reference (meaning no action is currently needed with this paper); or (4) keep it to take some type of action on.

Examples of papers that come into your office that require you to take action include invoices, tax forms, bank statements etc.

This type of confidential paper is often left aside to be worked or filled in at a later stage, creating a “to do pile.” The longer this pile is left to accumulate the bigger the pile becomes creating more stress and clutter. While also being a security risk as a data breach could occur if these documents came into the wrong hands.

Adopting a “Clean Desk Policy” is a good step to deal with clutter and prevent piles from building. Working on documents on a daily basis is a good first step. Do a little everyday will be a lot in the long run. The daily routine will become a weekly routine.

When you combine the daily and weekly routines together the total system for paper organisation will be complete.

What To Do In The Weekly Paperwork Session

The weekly paperwork session is not complicated. First, choose a day that suits your schedule. Doesn’t matter what time or day you choose as long as you do it consistently.

Once you’ve decided on the day, all you do is grab the stack of paperwork that has accumulated over the course of the week on the day you’ve chosen, and now you sit down and tackle it, one piece of paper at a time.

Do the paper work in batches. Deal with enough confidential documents that reduces the pile. It is still business as usual when dealing with the pile, paper is still going to be added but again as long as the pile is getting smaller than bigger is what we desire.

You should consider doing the following tasks during your weekly paperwork session:

  • Pay bills
  • Make phone calls that are necessary about bills, or other information that comes in during the week
  • Reconcile your bank account, confirming what checks cleared during the past week and that all deposits are credited to the account, etc.
  • Make any necessary money transfers between bank accounts.
  • Confirm everything appears to be working normally as it relates to automatic withdrawals and automatic bill pay for your accounts.
  • De clutter, organize and file that week’s receipts.
  • File paid bills and other filing that has accumulated during the week.
  • Deal with any other documents confidential or otherwise.
  • Adding dates to your calendar, both from papers or emails you’ve received.

These tasks deal with paper data but digital data is equally as important to deal with. Responding to emails and other on line services should also be part of your document organisation schedule.

It doesn’t matter how big a pile has accumulated, a paperwork session is about good habit forming done regularly each week.

Once paper organisation habit has formed, it creates a better management of document life cycle and spot potential data breaches and mistakes in the documents.

Off Site Shredding Service Can Handle Large Quantities

Clutter can be dealt with on you desk and around you. There is also an option of availing of a Clear out Shredding Service. Old or archived documents that no longer serve a purpose that may be in a clutter pile can easily be dealt with by our services.

Security In Shredding offers both On Site Document Shredding and Off Site Document Shredding Ireland. We can handle large quantities of paper and shred them securely. If you want that pile removed quickly and remove the data breach risk immediately,

please contact our team today and visit our site. We operate our Confidential Shredding in Dublin, Galway, Limerick and Cork areas and the rest of Ireland.

7 Questions Dealing With Sensitive/Personal Data

Posted on by
Reply

privacy-data-security

We live in a digital information age and how this information in gathered and viewed is through mobile or electronic devices. On site document shredding services will handle your paper data and also digital media to be destroyed securely.

Cyber liability, cyber security and information governance are terms that managers and directors are aware of due to high-profile data security breaches in recent events (“Panama papers”). Mason Hayes & Curran covers the critical questions these companies need to be asking.

In an increasingly interconnected world, with the expansion of the internet and development of the internet of things (IoT), there has been a corresponding increase in the vulnerability of information systems to attack.

The Cyber Security for Directors app with the Institute of Directors in Ireland has released an app to help heads of companies to understand their responsibilities regarding digital data security.

The app details the various types of cyber liability and cyber risks, while drawing together the key areas for directors to consider. It also outlines both proactive and reactive strategies to manage cyber security. The app is available on Android and iOS.

Technology has rapidly changed over the past 20 years and continues to grow. People’s reliance on digital devices both for storage and transmission of data, is making data breaches all the more damaging to organisations. How a mobile device operates both the front end (you) and back end(server) is not that transparent unless you have a good understanding of data transfers.

Knowing how this works is not essential but can make it easer to understand where the pitfalls lie within a device will benefit data security.

Where there is liability, there is a corresponding responsibility for that liability. As the duties of directors come increasingly under the microscope, it is clearly in the interests of directors to ensure that they understand their responsibilities in this area.

Below, we have outlined the key questions that directors should ask in relation to the collection and processing of data

1. Are we being transparent?

Data must be obtained fairly and the company must be transparent about the reason the data is being collected and the purpose for which the data will be used. Data must not then be put to a further incompatible use.

2. Do we have consent?

Consent is usually, but not always, required. If the information is non-sensitive, there can be implied consent. If the information gathered is sensitive (such as relating to an individual’s health, race, sex life, religious beliefs or trade union membership) then there must be explicit consent.

3. How long are we retaining data for?

Personal data can only be stored for as long as is necessary. There should be no retention of data ‘just in case’.

4. Are we collecting unnecessary data?

Data should only be collected if necessary. There are PR risks to any company if data is collected and stored unnecessarily.

5. Are we keeping the data secure?

You must have appropriate security measures to protect any data you are storing. Take into consideration the state of the technology you are using, the cost of implementation and the nature of the data and potential harm if a breach occurs.

6. Are we giving the data to third parties?

Are the third parties controllers or processors? In other words, on whose behalf will they use the data? If they are controllers, you will likely need consent for collection. If they are processors, special written contract terms are required.

7. Is the data leaving Europe?

If collected data remains within the European Economic Area (EEA), transfer issues do not arise. If the data is to be transferred outside the EEA then safeguards are required unless it is an approved country, eg Canada.

Check out www.mhc.ie for more information on Tech law.

Industrial paper shredding and media destruction are performed securely and confidentially by our team at Security In Shredding. For more information on our shredding or destruction services please contact us.

 

5 Data Security Tips To Protect A Company’s Sensitive Data

Posted on by
Reply

Secure Paper Shredding Hard Drive Shredding WEEE Destruction

For many small business owners, are aware of the potential data breaches that can occur. Secure document shredding is one method of data security but most people will think “It wont happen to me” and when it does happen it can cost the business upwards of €100,000 fine if data security was inadequate. For a small business, one data breach can destroy their reputation and customer confidence.

Below are 5 tips to implement data protection solutions that all small businesses can do today to protect their customers, their reputation and their people against data breaches:

  1. Implement a Clear-out Shredding Policy

Clear-out Shredding policies ensure all paper documents are shredded before being recycled or disposed. The Clear-out Shredding Policy removes any uncertainty around whether documents are confidential and require shedding. This simple step is one of the easiest ways to avoid human error including mishandling of confidential documents and files. In addition, all shredded paper is recycled, adding an environmental benefit to a security solution for businesses. Overall, it leaves little to be decided around the type of information that should not be deposited in recycling bins and waste paper baskets.

  1. Encrypt all electronic devices

Mobile devices are everywhere. There are more mobile devices than people in circulation. A workplace mobile will be used so employees can access the information they need remotely, which means company information may be exposed to greater security vulnerabilities. Encrypting all electronic devices is an important first step in securing information.

All electronic devices used by employees should be encrypted to protect sensitive data regardless for their own benefit and not just the company or organisation. In the event that electronic devices are lost or stolen, encryption will protect the information stored on the device and mitigate any compromising activity.

“End to end encryption” is a term you should look out for especially when transferring data. Software applications can do the same function a number of different ways. Knowing how they operate is recommended.

  1. Maintain Clean-desk policy

A clean-desk policy encourages employees to clear their desk and secure documents in a filing cabinet or storage unit when they are away from their desk or office at the end of the day. This includes documents, files, notes, invoices, and removable digital media like memory sticks. Unattended and untidy work stations pose a greater risk as loose information is an easy target for theft. A clean-desk policy ensures that all confidential data is locked in a secure area.

  1. Protect Printers & Peripheral Devices

Implement a ‘best practices’ standard for printing confidential information. Encourage employees and staff to not leave documents unattended at a shared printing station. To strengthen security around printing stations, consider using passwords for printing jobs. A printer is connected to a network and can be an entry point for hackers to access a network. Any other peripheral device that’s connected to a network may need an added layer of security just in case.

  1. Designate a Security Manager

If your business or organisation does not have one, now is the time to assign someone to do it. While it is important to have senior management and leadership play a vital role in mitigating data breaches, engaging employees from all levels and cross-departments helps strengthen an organization’s focus and commitment on information security.

At Security In Shredding maintaining data security is a vital importance to us. We must comply with data protection laws. For more information on paper shredding and data destruction services, please get in touch with one of our staff for more information.

8 Benefits For Responsible Document Shredding

Posted on by
Reply

confidential shredding, clean desk policy

At Security In Shredding our mobile paper shredding units are available and comply with data protection laws. Outsourcing an industrial shredding service will ensure your data security is maintained and securely destroyed.

Businesses, organisations and Institutions and people alike have fallen victim to identity theft and scams because of loss of information that a person used off of a stolen document. A person or employee must follow a correct procedure in the way they destroy paperwork with any kind of information on it (sensitive or not) in order to protect their customers. The list below are eight benefits that happen when a company performs document shredding.

8 Benefits of Responsible Document Shredding

  1. Document shredding gives company owners and customers a peace knowing that their information has been destroyed the right way.
  1. Shredding responsibly gives people the option of having the process taken care of by a third party. In some cases there is no need to buy expensive paper shredders if there is a company that can come to your job site and take care of the process for you. Most office shredders do not provide a secure data destruction.
  1. Shredding and then recycling paperwork keeps the landfills from filling up sooner than it should. Paper is one of the most used materials in circulation. Just about every house and company throws out paper on a daily basis. By shredding paper landfills will be around for trash that cannot be recycled for a longer period of time.
  1. In some cases shredding of personal information keeps a company compliant with Data Protection Laws in Ireland. The Data Protection Commissioner provides useful information about how to destroy or handle personal information.
  1. It gives customers and business owners an unspoken bond of trust knowing that they are looking at for the well fare of each other.
  1. From an environmental standpoint document shredding protects trees from being used for new paper products.
  1. Document shredding also provides a safe and clean way of waste disposal. A clean desk policy can help reduce having a bunch of loose papers sitting around the office taking up space.
  1. The process gives you the joy of knowing that you are doing your part to protect the environment and the personal lives of your customers. Companies that go out of the way to protect their customers will find loyalty and more sales because they are a trusted established business.

Security and Compliance are important words for us at Security In Shredding. Document shredding services are available both on site and off site. For more information please visit our site.

What To Keep & What To Shred: Document Retention Policy

Posted on by
Reply

Data Retention & data destruction

At Security In Shredding, document shredding is done with confidentiality and security is paramount when carrying out data destruction service. Data breaches occur when people are negligent or not aware of a breach. The most recent high profile story being the “Panama Papers” leak.

The Panama Papers is the latest mega data breach where millions of confidential documents from a Panamanian law firm were leaked, exposing offshore bank accounts – and possibly tax havens – for wealthy clients.

In light of this recent breach “I think we need to change the fundamental design of the way each and every document is created and managed,” –  commented Bill Anderson of cyber security company OptioLabs, in a cnet.com story about the Panama Papers.

While there are many aspects to data security, a sound document retention policy is one of the most important. Knowing what confidential documents to keep and which ones to permanently destroy should be of concern to everyone. Maintaining a clean desk policy will also help minimise the risk of confidential documents getting lost with other data.

This high profile case may sound like it won’t happen to you but the chances are that the data breach occurred by improper use or destruction of a data. All it takes is one wrong move for all your data to be accessed.

Below are some document retention policy guidelines to help keep your information secure.

  • Information Audits: Use audits to identify the types of documents the business produces, and to create an inventory and keep it updated.
  • How Long To Keep Tax Records? There are two parts to data retention: how long documents will be useful to the business, and how long they must be retained based on government and industry requirements. Checking with Revenue.ie on how long to retain your tax returns.
  • Fines – either way: While it’s law to keep certain documents, if you retain a record for too long you might also expose yourself to litigation risks and fines. Like most privacy laws, Data Protection Act compliance stipulates the record must be securely disposed of when the official retention period is over.
  • Emails: Records are paper files, digital documents, and correspondence including emails. According to wired.com, the Panama Papers leak included more than 4.8 million emails (as well as 3 million database files and 2.1 million PDF’s). If emails aren’t part of an important business or legal use or not subject to regulatory compliance, delete them within the appropriate time frame.
  • Controlled Access: Index all documents for easy retrieval. Store in a secure, locked location and/or in a password protected file. Control who can access sensitive documents and logging when this information has being accessed. Storing unwanted documents increases the risk of a Data Breach and adds to clutter.
  • Secure disposal: The only acceptable way to discard paper or digital documents when they are no longer needed is to completely destroy them. Industrial Shredding companies can dispose large quantity of documents, and outsourcing eliminates risk. Partner with a reputable shredding company that has secure chain of custody processes for information destruction. A Certificate of Destruction will document compliance and should be issued after every shred.

At Security In Shredding data security is equally important as confidential data destruction. An on site service or off site service is available throughout Ireland. Please visit our site for more information.

Data Breach Incidents in Educational Institutions

Posted on by
Reply

paper-vs-digital

Shredding companies in Ireland are employed by educational institutions such as colleges and universities. These institutions are considered easy targets because of their open structure and long information retention periods.

Data Breaches have occurred in educational institutions ranging from lost laptops with sensitive information to targeted cyber-attacks and student identification cards. There are lots of other confidential data that is useful to attackers beyond payment data and student records; such as employee records, patient health information and scientific research data. Paper shredding or document shredding will reduce the risk of data breaches

Negative public exposure regarding a breach will have a negative impact on the reputation of the educational institution as well as the enormous knock on effect it would have regarding peoples data. In order to minimise the risk of any size of a data breach a Risk Reduction Strategy must be established.

Security in Shredding recommend a number of methods to include in a Risk Reduction Strategy;

  1. “Data Security” has to become “second nature” within the colleges and universities from the top down. A Data Security Informational Event should be organised by the educational institutions to inform in a fun way, the students and employees the importance of data protection and data security. You could look upon this as a form of training – Knowledge is key.
  1. Make students and employees aware of the Data Security Policies and Procedures. Use means such as bulletin board, posters, newsletters etc.
  1. Regular risk assessments should be conduct on an on-going basis to identify where the gaps in information security exist and to establish and provide the solutions.
  1. Physical Security of all sensitive data is very important. Secure restricted authorised access for key personnel is an important measure to take to minimise the number of unauthorised access events.
  1. Maintain a “Clean Desk Policy” and place all sensitive paper records that is no-longer required in the lockable secure console that is provided by the contracted Data Destruction Service Provider such as Security in Shredding.
  1. Implement and utilise IT security tools such as firewalls, encryption, anti-virus software etc. It is important to protect both digital data and hard paper data.
  1. Establish and use a Document Management Process for the tracking of documents, generation, storage and destruction of documents.
  1. Use the professional secure recognised services of a registered data processor whom is an established Full Data Management Service Provider, such as Security in Shredding whom provides a complete secure chain of custody for your data needs.

If you would like to find out more about on site paper shredding and or off site paper shredding, contact Security in Shredding’s Data Consultant Team on 067 24848. They are glad to help.

4 Reasons Why A Paper Shredding Service Is Needed

Posted on by
Reply

Security In Shredding on site service

Paper shredding or document shredding is vital for protecting confidential and sensitive information / data. Most of us create and keep files with sensitive data; examples of which are bills, financial statements, marketing plans, employee files, and even delivery packages. Industrial shredding services are used by Government offices, non-commercial organizations, small and large businesses, and private citizens. These document shredding specialists will shred the documents securely beyond recognition.

1. Compliance With The Law

We all have the right to protection of personal information. The Data Protection Commissioner was put in place to enforce the obligations of businesses to protect data. Failure to comply, as there are laws that penalize improper disposal of documents with sensitive and confidential content. Businesses and Organizations that hold personal data but neglect to protect it face financial and legal consequences. Employers for example use paper shredding services to get rid of employee files which are no longer in use.

2. Positive Recycling Habit

Reducing the amount of paper used in an office is a good reduction method, while reduction also ensures that there is less of a chance data breaches from misplaced documents. The paper and documents shredded by a mobile paper shredding service will be put into a compost heap and reused at a later stage. This creates a good recycling method for your business and benefit the environment overall.

Data Protection, Paper Shredding, limeirck paper shredding

3. Preventing Identity Theft

Without shredding or destroying documents before disposing them, Identity theft is a possibility. All it takes is someone to simply look into a bin and grab what they can. With data now widely available is now more of an issue. Any data is far better shredded before disposal, all it takes is one piece of information in the wrong hands for a data breach to occur. These breaches are damaging for a business or organisations reputation.

clear out paper shredding

4. Eliminating Clutter & Hazards

Papers occupies space and cause clutter and increase the risks of fire. Once a document has served its purpose, offices need to constantly get rid of these papers as part of an organization-wide records management system. A paper shredding policy within an organisation for when to retain and destroy documents will help an employee to take care of the proper disposal and destruction of paper documents. However shredding services are available throughout Ireland and hiring a industrial paper shredding company is more cost effective.

Document shredding is important part of business practice. Mobile paper shredding services are available. Along with an awareness to data breaches and compliance with the law will ensure data security.

Security In Shredding provide high quality secure shredding services. They provide a Confidential Waste Disposal service both on site and off shredding available. If you are in the Limerick area then please visit our Limerick page for more details.

5 Best Practises Regarding Document Management

Posted on by
Reply

paper-vs-digital

Paper shredding is important practice for businesses in Ireland. A confidential shredding specialist will remove unwanted document and destroy them in a secure manner while also help remove clutter from the office.

Offices should avoid having files, documents and detailed paper information scattered on top of filing cabinets and desks. In every organisation regardless in size, it has a responsibility to manage the information it handles in a secure and organized way. It should be a priority or each and every organisation to minimise the risk of a data breach;

Security in Shredding have outlined below the top five best practises for Document Management whom they encourage every business to follow;

  1. Indexing & Filing:

    An organised document management system has an effective and current index system based on the file contents and compliance requirements. The organisation should manages file creation in an efficient manner whereby no duplication or irrelevant copies are filed and records retention periods are clearly labelled on the files or storage boxes. Security in Shredding would recommend implementing an electronic file tracking system to manage where documents are in their life cycle, and show whether documents are active, archived, or ready for disposal.

  2. Secure Storage:

    Sensitive data stored on hard paper data and e-data should be securely stored and protected either in locked cabinets or a locked room. Many organisations produce a substantial volume of paper as a result from employees conducting their duties, making notes, printing of emails, discussion notes, to do lists – the list goes on. It is just as vital that this paper production is securely stored in lockable consoles when the employee has not longer got a requirement for it. Security in Shredding encourage organisations to implement a Shred-all policy whereby all paper produced in the offices that is no longer required is placed in the secure consoles for destruction at a scheduled date.

  1. Limited Access:

    It is vitally important that limited access is maintained with hand-picked specific employees having the secure access to the file sharing system the organisation has in place. Security in Shredding recommend using a system that uses authentication and password protection to control access and track and manage who can view them.

  2. Retention and Destruction Schedule:

    All documents and files should be clearly labelled by what they contain, retention period, and end of life date. When documents reach their end of life they must be securely destroyed. Security in Shredding recommend outsourcing the destruction of all or any sensitive data to a certified professional whom are registered data processors. Also the Data Destruction Service Provider should provide a chain of custody from the time the material is placed in the secure lockable consoles to the secure removal of documents for shredding. The service provider should be able to provide certification for their ability to shred the sensitive confidential data to Shred No. 6 of the EN 15713 European Shredding Standard. A Data Processing Certificate should be issued post every service delivery.

  1. Staff Training:

    It is imperative that all employees are trained and fully understand the importance of Data Protection. Security in Shredding recommend every organisation to employee a Data Compliance Officer to enforce information security policy and ensure all aspects of Data Protection Legislation are adhered to.

If anyone has any queries regarding any of the important points illustrated, please do not hesitate to contact us to speak to our Data Consultants.

Our confidential document shredding services are available throughout Ireland. We regularly operate in the Limerick, Galway, Dublin and Cork areas.

Please visit our site for more information: https://www.securityinshredding.com/

Minutes To Happen & Weeks To Realise; Data Breaches

Posted on by
Reply

Phising Most Common Data Breach

At Security In Shredding we ensure that all data processed by us is confidentially and securely destroyed. Data destruction is vital part of business practice. Data security is paramount to us and the success of a business. Preventative methods to improve your data security comes in many forms. IT security is an area that can overlooked due to newer technologies and people not aware of IT pitfalls.

A report from Siliconrepiblic writes about a common data breach method and is important that people are aware of such an attack. Knowing these potential risks is important is today’s high tech world. The article writes:

“Phising” What Is It ?

A Google search will give you the following definition:

“Phishing is the attempt to acquire sensitive information such as usernames, passwords, and credit card details (and sometimes, indirectly, money), often for malicious reasons, by masquerading as a trustworthy entity in an electronic communication.”

Phishing is still the No 1 cause of data breaches and hackers are getting faster at breaking in, but firms are struggling and usually only find out weeks and even months later they have been breached, according to the 2016 Verizon Data Breach Investigations Report.

According to the report, in 93% of cases it took attackers minutes or less to compromise systems.Meanwhile, it took companies weeks or more to discover that an incident had even occurred.Worse, it was typically customers or law enforcement that sounded the alarm and not the organisation’s security measures.

‘A test we ran last year found that 23% of people that opened a message went on to open the attachment. In our latest report that has increased to 30%’
– LAURANCE DINE, VERIZON

According to the report, most reasons for breaches are money-related and cyber-attackers are indiscriminate and motivated by greed rather than revenge or some crusade.

Gone Phishing, Gone Data

Laurance Dine, managing principal in charge of investigative response with Verizon, told Siliconrepublic.com that phishing is still the chief method hackers use to attack organisations.

The report found that, in 2016, some 63% of confirmed data breaches involved leveraging weak, default or stolen passwords. Passwords such as “123456” and or “password” are used more often than you think 39% of breaches originate from victims’ own work areas and 34% from employees’ work vehicles.

Some 70% of data breaches involving insider misuse took months or years to discover.The report also revealed that new technologies like mobile and the internet of things are providing hackers with more ways of breaching an organisation’s systems.The industries most affected by data breaches are the public sector, healthcare and information.

Dine told Siliconrepublic.com that the data information was gathered from more than 67 partners worldwide and involved the analysis of 2,260 confirmed data breaches.

“There is still a serious information deficit when it comes to attacks. Attackers are getting into environments in minutes or days and it could be months and years down the line before anyone is aware of it and they usually hear it from law enforcement.

“Phishing is still the principal method of attack. A test we ran last year found that 23% of people that opened a message went on to open the attachment. In our latest report that has increased to 30%.”

“But if you are after the low-hanging fruit, the No 1 motivation for data breaches is still financial. Any data worth any value is a target.”

Read Siliconrepublic full article here: https://www.siliconrepublic.com/enterprise/2016/04/25/verizon-data-breach-report-2016

At Security In Shredding we strive to ensure that all documents and its data is processed securely destroyed on site or off site. Confidential shredding services are available throughout Ireland and we regularly operate in the Dublin, Galway, Limerick, Cork areas. Please visit: https://www.securityinshredding.com/