Category Archives: Confidential Shredding

Onsite & Off Site Paper Destruction Service

Posted on by
Reply

Security In Shredding on site service, Onsite shredding service

At Security In Shredding we provide excellent and secure service in both onsite shredding and onsite collection with off site shredding. Providing paper shredding in Ireland with a high quality service.

Din 66399 Standard

We operate under this standard. The Din requirement is in place and provide 3 separate shredding levels for your data destruction. The level of protection will depend on the how fine the paper is shredded.

  • Din level 1
  • Din level 2
  • Din level 3

The type of documents used will depend on the level of security you should implement. Documents containing a low threat and low impact would require Din level 1. Sensitive data restricted to a small group of people would require Din level 2 as if these documents were leaked would cause harm to a business. Din level 3 should be used for highly confidential data only accessed by authorised people.

On Site Mobile Shredding

This service is beneficial if you require your documents to be securely shredded on business premises. Our specially designed vehicles will securely destroy your documents. The entire process is done securely and is environmentally friendly where all waste is sent to a licensed waste company. More information can be viewed here:

https://www.securityinshredding.com/onsite-document-shredding.php

Off Site Document Shredding

Our off site service is also done to a high standard of security. We operate on a scheduled basis and our staff will collect the bags from a secure area within the business premises. The bags are collected by uniformed staff on a set time and will inform you if they are on route. The bags are placed into a locked secure van and taken to our site where it is shredded. Full details of the process can be viewed here:

https://www.securityinshredding.com/off-site-document-shredding.php

IT & Media Destruction

Data is not just paper data. It comes in many forms and digital data and the devices used also need to be destroyed in a secure manner. Digital has has become more and more popular and data protection of these devices needs to be implemented.

https://www.securityinshredding.com/it-media-destruction.php

Our aim is to provide you with a high quality and highly secure service, with minimal impact on your day to day business activity while maintaining your data security. For more information please visit our site or contact us for a consultation:

https://www.securityinshredding.com/

Shredding Documents Before Recycling Them

Posted on by
Reply

Data Protection, Paper Shredding, limeirck paper shredding

Paper data still plays a major part of industrial paper shredding. It is important that you are Shredding confidential paper before it is put into recycling. This is to ensure that your data is protected and cannot be viewed by public eye.

Paper like any other recycling is often left in the blue bin outside your home or business for it to be collected. This is a common practice and nothing wrong with it. If your recycling contains documents of a personal nature and or sensitive data nor for public knowledge, how it is disposed needs to be taken into consideration.

It is quite easy to access anything contained in these bins and within an urban area someone in a “white van” and a high vis jacket could pull up and throw these bags into the van. What they do with these documents may be unclear but can be malicious intent. Having the documents shredded before it is recycled will increase your data security.

Shredding Documents

A good practice for your business to incorporate is to shred your document before you put them into recycling bin. Also to be aware that a simple office shredder does NOT provide adequate data destruction. This data can be reconstructed. An industrial paper shredding service provides you with secure paper shredding. Incorporating a service to handle and destroy your documents should be used.

Scheduled Onsite Collection

A reputable shredding service will provide you with a collection service to handle and securely destroy documents you have. Ringing your shredding service provider and organising a collection at a time specified by you will ensure that you know when your documents are to be transferred.

A shredding service can provide you with sealed bags for collection and shred them in off site paper destruction location. A shredding service can also provide onsite shredding service with their specially designed trucks to handle and destroy these documents.

Data Protection

Under the EU directive the data protection act and the data protection commissioner are governing bodies in place to ensure that businesses handle data correctly and ensure sensitive data is used in a correct manner.

For more information on a reputable shredding service in Ireland please visit:

https://www.securityinshredding.com/

Responding To Data Breaches

Posted on by
Reply

Secure Paper Shredding Hard Drive Shredding WEEE Destruction

Paper Data;

Without a confidential document shredding service in place for shredding documents and media devices. Your company or business may become under scrutiny for not having these defensive measures in place to begin with.

It is common practice for a business to securely deal with paper documents in its handling, who can access it and how it is destroyed. Most businesses and organisations will incorporate a reputable paper shredding service and these processes are all above board.

Digital Data;

This trend is still widely used but not with the increase in use of mobile devices globally. Digital Data has become the preferred use of displaying data. How this information is used and the potential of this information being misused. Issues regarding digital use to be an “IT issue” but this is now no longer the case. Data Breaches and leaks have become more and more common due to lack of cyber protections in place. Lack of knowledge for one about cyber security is one factor that causes these issues.

Data Protection

A Data Protection strategy for digital and paper documents must be implemented throughout a business. There are governing bodies in place and bodies localised to your business and is worth knowing what procedures are in place for data protection. In Ireland the Data Protection Commissioner is a governing body directive from the EU.

“The office of the Data Protection Commissioner is established under the 1988 Data Protection Act.  The Data Protection Amendment Act, 2003, updated the legislation, implementing the provisions of EU Directive 95/46. The Acts set out the general principle that individuals should be in a position to control how data relating to them is used.”

The DPC provides guidelines for data protection and methods. If these measures are in place before a data breach occurs, it can save face for a business reputation and wont be scrutinised for not having these measurements in place to begin with.

The DPC site offers guidelines regarding Data Security both physically and digitally and the guidelines can be viewed here.

https://www.dataprotection.ie/docs/Guidance-Material-Menu-Page/m/219.htm

An Industrial Paper Shredding Service will provide you with credible Data Protection service please visit our site for more information:

Email us at info@securityinshredding.com

Protecting Personal and Work Devices

Posted on by
Reply

secure data

All electronic devices can potentially suffer from Data Breaches if not protected correctly. The breach can be in violation of Data Protection laws if the Data Protection Commissioner is not informed. Secure document destruction is an important part of business and organisation incorporate.

A recent event involving a personal computer used in a federal building that contained details of child support accounts, and social security details and other hard drives that may have contained user details.

A US watchdog wrote an open letter to the federal government asking why staff member was able to use a personal device to access these details, given that it violates the security policy. The letter continues and mentions other Data Breaches in government buildings and the lack of Data Protection.

Situations like this increasingly more common and not just government buildings. Bank account details have being breached. Online accounts to various sites have being breached and this happens on a global scale. You will hear that the breach occurred because someone left a device behind them. Be it the seat of a train home from work, a USB key dropped in a cafe.

The human error of forgetting something is not the problem (we all forget things from time to time), but the issue is the data contained on these devices and the lack of protection in place especially devices with sensitive data.

Company Policy

It is worth knowing your company polices on weather or not personal devices are allowed to conduct business actions. Also if using company devices weather or not you can use personal applications on them. It is important to know this. We live in a time of technology and information being widely available and with the increased usage there is also the potential of breaches.

How these breaches occur will can vary but there are common factors and technology is written with a universal language.

  • Ask your IT specialist on what to look out for when using the device
  • Research good practices online
  • Enalble location of device if appliable in case it is misplaced.
  • Encrypt devices where possible including mobile devices and USB keys
  • Be aware of what information is stored on a device (paper or electronic) and the potential breach that could occur if misplaced.

A confidential shredding service will also improve your Data Security and provide you with methods for protecting your device. Please visit our site for more information:

https://www.securityinshredding.com/

When To Disclose A Data Breach

Posted on by
Reply

iCloud security wake-up call, data brach

Secure document destruction methods must be in place to comply with Data Protection laws. A confidential document destruction service will benefit your business and its Data Protection.

Technology has brought us accessibility to a global market and small businesses have benefited greatly from this boom in technology. With a greater number of devices connected to an online service has also meant that a increase in the number of cyber attacks. Small businesses in particular are now being targeted.

A report from the Wall Street Journal has shown that small law firms are targeted the most due to the potential high profile client base they may have. That being said law firms do not usually hold social security information and the information obtained by hackers may not be beneficial to them.

Under American law, law firms are required to inform the public that a breach has occurred.

Data Protection Commissioner

Under Irish law the Data Protection commissioner has Data Breach guidelines for you and your business to follow. If a breach occurs it is paramount that the matter is dealt with swiftly to minimise damage. Data Protection Commissioner data breach guidelines can be found at the link below.

https://www.dataprotection.ie/docs/Data-Breach-Handling/901.htm

The document informs you on what steps to take if a breach has occurred. With this guide you can easily follow the steps needed to take and the information to provide when informing the Data Protection commissioner.

“Failure to comply with these obligations can result in a criminal prosecution with fines up to €5,000 indictment €250,000 per offence.” 

The document also state “Prevention is better than cure.” Setting up company policies and practices for handling of sensitive data should be implemented immediately. A reputable Shredding Service will also improve Data Security within your company. A shredding service will be able to provide an onsite shredding service. Confidential shredding is paramount to shredding services.

A reputable shredding service will comply with the protocols provided by the Data Protection Commissioner. It is a governing body to help protect your personal data and the data of others.

Please visit our site for more information on a Confidential Shredding Service:

https://www.securityinshredding.com/

Full Article Wall Street Journal Report:

https://blogs.wsj.com/law/2016/03/30/when-do-law-firms-have-to-disclose-data-breaches/ 

 

Data classification and identification

Posted on by
Reply

Security In Shredding on site service, Onsite shredding service

Confidential shredding in Cork and throughout the country can incorporate a off site document shredding service to promote good business practice.

Internal Data classification and identification is when an Organisation tags their data so it can be managed effectively, securely processes, found quickly and destroyed appropriately.

It is a beneficial exercise for many Organisations as it helps to de-duplicate data stored on devices, this de-duplication vastly speeds ups data searches while also saves upon revenue in the form of storage capacity and back-up requirements for a given Organisation.

This exercise is also required for Organisations who need to meet legal and regulatory requirements for destroying the information beyond reconstruction, not holding information longer than necessary in addition to enabling an Organisation to retrieve specific information within a set timeframe.

Data strategies vary significantly from one organisation to another for many reasons. For example, many may generate different types and volumes of data that are subject to differing legislative requirement and responsibilities. The balance of information type can vary from one user to the next between e-mail correspondence, images, video files, office documents, customer and product information, financial data just to name a few.

It may seem a good idea to tag and classify everything within your Company database however experts here and abroad advise against this due to high costs and success rates within Organisations. Certified database technology is available for Organisations however; this method seems to work best for Governments with an allocated budget for the activity.

Alternatively, it is advised that Organisations can choose certain types of data to classify into the main segments of your business, for example; account data, personal data and commercially valuable data.

It is advised that an Organisation’s data is to be classified in line with their confidentiality requirements. It is important to carry out an information audit at this stage which in turn will give you an accurate view of the nature of the data.

It is essential for an Organisation to ensure that the data it is classifying is of good quality, “Common pitfalls for Organisations is that too much rubbish is allowed to accumulate, from duplication to copies of office party photos to personal letters to bank managers”, storage cleansing technologies are extremely useful at this stage to eliminate obsolete, trivial or redundant content.

Once the classification system is up and running it is important that management and staff take part in periodic reviews as it is not set in stone and business developments can translate to design changes in data classification.

Once the data has been classified an Organisation is empowered with the ability to tailor procedures for specific data in order to maintain regulatory compliance.

Secure Destruction of Sensitive data.

When destroying information whether it be hard paper data or digital data on data carriers it is essential for Organisations to ensure that they comply with regulations and are not proving to be negligent in their processes. For this reason, we have constructed three different protection classes for data that requires specific attention to ensure that the material has been destroyed appropriately.

 

Protection Class

 Risk

 

 Protection 1:Normal security requirement for internal data Unauthorised publication or dissemination would have a limited negative impact on the company. Protection of personal data must be ensured. There would otherwise be a risk to the position and financial situation of the affected persons.
  Protection 2:High security requirement for confidential data
Unauthorised dissemination would have a considerable effect on the company and could infringe legal obligations or laws. A personal data data-breach would result in considerable risk to the social standing and financial situation of the affected persons.
  Protection 3:Very high protection requirements for particularly confidential and secret data. Unauthorised dissemination would have serous terminal consequences for the Company and infringe upon trade confidentiality, place a data subject at risk of safety or freedom, break contracts and legal law.

It is essential that the confidentiality of personal data is maintained.

 

Destruction Tips;

Protection Class 1:

Destruction activities must be carried out in line with a detailed procedure, all staff carrying out destruction activities are to be trained. Alternatively, destruction processes are to be implemented and provided through a data processing firm receiving all data processing certificates for completion of destruction. All data is to be destroyed to shred No. 3 of EN 15713.

Protection Class 2:

Destruction processes of data in protection class No. 2 are to be implemented and provided through a data processing firm receiving all data processing certificates for completion of destruction. All data is to be destroyed to a minimum of shred No. 3 of EN 15713. The data processor must be registered for their services.

Protection Class 3:

Destruction processes of data in protection class No. 3 are to be implemented and provided through a certified data processing firm receiving all data processing certificates for completion of destruction. All data is to be destroyed to a minimum of shred No. 5 of EN 15713. The vendor must be independently certified to destroy paper and digital data beyond reconstruction and they must be registered for their services with the policing authority in the relevant Country.

Visit: https://www.securityinshredding.com/ for more information on a confidential shredding service.

Data Protection Ireland Today

Posted on by
Reply

Data proccesser and data commissioner

Secure document destruction in Ireland can come in the form of an onsite paper shredding service or an off site paper shredding service. Data comes in many forms and The Data protection Act is in place to ensure that this data is protected.

Data Protection is a vital for a business to succeed and remain in business. If customers or users know that your service does not protect your data. It will be a massive loss to business and business reputation. Your business can suffer from a severe penalty for not protecting your data.

An interesting article written by Colm Gorey titled “3 issues defining data protection in Ireland today”   The issues discussed are relevant to today’s business. The 3 topics discussed were:

  1. ISO 27018: Cloud computing privacy standard – one year on

  2. Personal data and your right to access it — Ireland vs the UK

  3. Challenges to data protection under the internet of things

The first point talks about the governing of personal data through cloud based systems. Standards have being created to ensure the protection of data and were received well by Data Security experts. The ISO 27018 standard can be read here. Cloud computing has become a major asset to business functionality and knowing what cloud based systems are doing with your data should be investigated and researched when changes if any occur.

The second point refers to Irish and English law. Although both countries have similarities the law for each country does vary and in particular with personal data and access to it. Your business must abide by the rules in place of the country it is based in. A good example of how country laws differ can be read at this link.

Awards of Damages for Data Protection Breaches – UK and Irish Approaches Contrasted

Thirdly the internet of things (IOT) refers to the general use of internet and internet services. Governments and official bodies are trying to develop ideas or frameworks that will regulate the internet of things. What has happened is the EU 28 data protection bodies.

for more information on data protection and a confidential shredding service please visit: https://www.securityinshredding.com/

 

 

Dangers Of Data Breaches For Small Businesses

Posted on by
Reply

Heartbleed Data Theft

Secure document shredding in Dublin and throughout the country are services needed to ensure your business is complying with Data Protection laws. These laws are in place to ensure businesses that possess sensitive data are protecting against vulnerabilities both physically and digitally.

Cyber criminals will target small businesses. In the UK the minister for the digital economy Ed Vaizey outlined (2015) that a major security breach for a small business in the UK could cost as much as £310,800. This figure also applies to Irish businesses and any small business in operation.

Dataprotection.ie have detailed descriptions on how to protect your business and improve its security. The site has guidelines to improve your business security. Researching online can be difficult because you will read conflicting reports and incorrect information. The data protection site provides you with useful and up to date information from a governing body to help improve your business security and data protection.

On the site is a guideline to improve your data security. It covers the law to software and IT support to use. With a little bit of know how and awareness to possible threats will benefit you and your business greatly.

There are 19 steps in total on the guideline page which can be read in full at data security guideline page, below are a steps from said list.

1. Install an Anti Virus Software

It is a necessity for any electronic device that transfers data. Anti Virus software protects more than just your computer, it also protects your emails and personal details when online. Malware is a big threat to computers and using a reputable ant virus will benefit.

Remember to update the anti virus software regularly as anti virus software can only protect against known viruses.

2. Firewalls

Firewalls are a essential form of protection where there is external connection. Always on internet is now a common practice for businesses. This makes a properly configured firewall a good form of security.

3. Wireless networks

When using a wireless network in your own business network make sure that proper encryption is setup on the wireless network. Be aware when using public networks such hotels and airports can potentially a risk. Use it if necessary and if you are transferring personal data make sure to be in a secure session on the device.

4. Human Factor

Is often over looked and is often used to breach a business. For example cyber criminals have accessed user accounts by using passwords such as “123456” and or “password.” Sounds crazy but happens more often than you would think. Use a more cryptic password. What the password contains will help its strength but the more characters used the greater the strength.

Also be aware of printed documents that may contain sensitive data and if not disposed properly can be accessed. Having a reputable Shredding Service dispose of your documents securely and safely.

For more information on a secure shredding visit: https://www.securityinshredding.com/  for more information.

 

Data Processors And Data Commissioner

Posted on by
Reply

Data Protection Commissioner

Mobile Paper shredding throughout Ireland and the companies that provide confidential document destruction are governed by Data Protection laws and the Data Protection commissioner. This can be broken down into two parts.

Data Processors

Security in Shredding are registered Data Processors with the Data Protection Commissioners Office. So what is a Data Processor one may ask; a Data Processor is a company, organisation or person who processes data on behalf of a Data Controller. “This does not include employees who process data in the course of their employment.”

“Cloud providers are also generally Data Processors.”

“It is possible for one company or person to be both a data controller and a data processor, in respect of distinct sets of personal data. For example, a payroll company would be the data controller in respect of the data about its own staff, but would be the data processor in respect of the staff payroll data it is processing for its client companies.”

“A data processor is distinct from the data controller for whom they are processing the personal data. An employee of a data controller, or a section or unit within a company which is processing personal data for the company as a whole, is not a “data processor.” However, someone who is not employed by the data controller, but is contracted to provide a particular data processing service (such as a Security in Shredding providing and conducting a confidential secure data destruction service) would be a data processor.

Responsibilities of data processors

The Data Processor must only process personal data on the instructions of the Data Controller, for example, the Client (the Data Controller) schedules an on-site service delivery where by Security in Shredding (the Data Processor) arrives on-site to conduct on-site shredding of the clearly identified material for destruction. The responsibilities concern the necessity to keep personal data secure from unauthorised access, disclosure, or destruction unless confirmation is received prior to doing so.

“In addition all data processors, whose business consists wholly or partly in processing personal data on behalf of data controllers who are required to register, are also required to register with the Data Protection Commissioner as a data processor.”

For further information about Data Processors please click on any of the following website addresses;

www.securityinshredding.com

www.dataprotection.ie

www.aurthercox.com

Also available in the Limerick area and please visit:

www.securityinshredding.com/limerick-shredding-services.php

Choosing A Shredding Service Dublin Area

Posted on by
Reply

Importance of Paper Shredding for Dublin

Secure document shredding services are available throughout Dublin and greater Dublin area. Onsite paper shredding services in Dublin are available to benefit you and ensure your documents are securely dealt with.

Data protection and Data destruction methods are now mandatory for all businesses. The Data Protection Act requires you to have these methods in place or you could be liable for any data breaches if they occur. Sensitive or personal data that is not secured is often the cause of identity theft. It can easily be done if documents are not securely destroyed.

Before choosing a shredding service, it is worth researching the shredding service before using them.

What to look for when choosing a shredding service:

A Compliant Secure Shredding Service

Ensuring that the shredding service is both professional and secure in its business document destruction. The Din 66399 and EN 15713 standard should be sought when choosing your shredding service. This is a European standard and shredding companies must comply by these standards.

What to Shred

If your business uses and or posses a person’s information, then a shredding service is required and should be implemented by all organisations.

The link details the kind of information that needs to be shredded.

What To Shred

On Site Document Destruction Service.

A reputable shredding service will be able to call out to your premises regardless of location. The on site call out can save you and your organisation on time and effort and the document destruction can also be supervised by a member of staff to ensure documents are being destroyed in a professional manner.

Shredding Volumes

It is also worth researching the volumes of paper a shredding company can handle for your business. Your business or organisation may have a large quantity of documents with your own and other sensitive information that you don’t want accessible to people outside of the company.

References

Enquiring with other companies that use a shredding service in their business is worth looking into. It is important to know how the shredding service works and if it will apply to your own organisation. if the shredding company has satisfied customers is worth researching before committing to the service.

For more information on secure document and bulk paper shredding please visit:

https://www.securityinshredding.com/