Category Archives: Corporate Social Responsibility

The Future Of Data Security

Posted on by
Reply

Secure Paper Shredding Hard Drive Shredding WEEE Destruction

Document shredding service are a vital part of Data Protection. Shredding services in Ireland when a clear out shredding is needed. Offsite shredding services can be incorporated into everyday business to comply with Data Protection laws and improving Data Security.

Siliconrepublic an Irish based article site recently posted an interesting article regarding the future of Data security. Data Security is now more than ever vital for businesses to succeed. Technology has continuously improved and grown over the past number of years. The devices used has greatly helped smaller businesses compete with larger companies. With all this growth in technology aspects of the technology have being lost or information about it has become confusing and conflicting.

Data Security with technology will always be a continuous process. Between encryption, mobile devices and cyber warfare means that there will be no end to this process. Security experts can only protect against known breaches. Hackers have a small window of opportunity to work with.

Data Security Small Business

What does this mean for your business. For one, hiring a confidential shredding service that is also reputable and recognised by governing bodies. A shredding service must comply with Data Protection laws. A shredding service implemented within your business will ensure that you are protecting your data and improving data security.

Data Security is more than just electronic devices and digital data. Paper also contains data. Sensitive data in particular must be accessed and handled correctly. Who has access to this data and how this data is destroyed when no longer in use. A shredding service will handle these documents and devices and destroy them in a confidential and secure manor. ISO 9001:2008 is a good mark to look out for before hiring a shredding service for your business.

This type of data is what hackers and criminals try to achieve and will prey on human error to obtain this data. Dumpster diving will occur and if your documents are not shredded or only used a simple office shredder will not securely destroy data. Digital data can be accessed easily if the data is not encrypted or has not being wiped correctly. USB keys should be kept securely in your possession if they contain data. When shredding ask for the DIN level of shredding required to ensure secure data destruction.

Awareness to these methods is paramount to the success of your business and Data Security. If a data breach occurs then your business can be liable and receive a hefy penalty.

Read the full article here:

https://www.siliconrepublic.com/enterprise/2016/03/24/cybersecurity-future-of-security-hackers

Details for a confdential shredding service please visit:

https://www.securityinshredding.com/

Data classification and identification

Posted on by
Reply

Security In Shredding on site service, Onsite shredding service

Confidential shredding in Cork and throughout the country can incorporate a off site document shredding service to promote good business practice.

Internal Data classification and identification is when an Organisation tags their data so it can be managed effectively, securely processes, found quickly and destroyed appropriately.

It is a beneficial exercise for many Organisations as it helps to de-duplicate data stored on devices, this de-duplication vastly speeds ups data searches while also saves upon revenue in the form of storage capacity and back-up requirements for a given Organisation.

This exercise is also required for Organisations who need to meet legal and regulatory requirements for destroying the information beyond reconstruction, not holding information longer than necessary in addition to enabling an Organisation to retrieve specific information within a set timeframe.

Data strategies vary significantly from one organisation to another for many reasons. For example, many may generate different types and volumes of data that are subject to differing legislative requirement and responsibilities. The balance of information type can vary from one user to the next between e-mail correspondence, images, video files, office documents, customer and product information, financial data just to name a few.

It may seem a good idea to tag and classify everything within your Company database however experts here and abroad advise against this due to high costs and success rates within Organisations. Certified database technology is available for Organisations however; this method seems to work best for Governments with an allocated budget for the activity.

Alternatively, it is advised that Organisations can choose certain types of data to classify into the main segments of your business, for example; account data, personal data and commercially valuable data.

It is advised that an Organisation’s data is to be classified in line with their confidentiality requirements. It is important to carry out an information audit at this stage which in turn will give you an accurate view of the nature of the data.

It is essential for an Organisation to ensure that the data it is classifying is of good quality, “Common pitfalls for Organisations is that too much rubbish is allowed to accumulate, from duplication to copies of office party photos to personal letters to bank managers”, storage cleansing technologies are extremely useful at this stage to eliminate obsolete, trivial or redundant content.

Once the classification system is up and running it is important that management and staff take part in periodic reviews as it is not set in stone and business developments can translate to design changes in data classification.

Once the data has been classified an Organisation is empowered with the ability to tailor procedures for specific data in order to maintain regulatory compliance.

Secure Destruction of Sensitive data.

When destroying information whether it be hard paper data or digital data on data carriers it is essential for Organisations to ensure that they comply with regulations and are not proving to be negligent in their processes. For this reason, we have constructed three different protection classes for data that requires specific attention to ensure that the material has been destroyed appropriately.

 

Protection Class

 Risk

 

 Protection 1:Normal security requirement for internal data Unauthorised publication or dissemination would have a limited negative impact on the company. Protection of personal data must be ensured. There would otherwise be a risk to the position and financial situation of the affected persons.
  Protection 2:High security requirement for confidential data
Unauthorised dissemination would have a considerable effect on the company and could infringe legal obligations or laws. A personal data data-breach would result in considerable risk to the social standing and financial situation of the affected persons.
  Protection 3:Very high protection requirements for particularly confidential and secret data. Unauthorised dissemination would have serous terminal consequences for the Company and infringe upon trade confidentiality, place a data subject at risk of safety or freedom, break contracts and legal law.

It is essential that the confidentiality of personal data is maintained.

 

Destruction Tips;

Protection Class 1:

Destruction activities must be carried out in line with a detailed procedure, all staff carrying out destruction activities are to be trained. Alternatively, destruction processes are to be implemented and provided through a data processing firm receiving all data processing certificates for completion of destruction. All data is to be destroyed to shred No. 3 of EN 15713.

Protection Class 2:

Destruction processes of data in protection class No. 2 are to be implemented and provided through a data processing firm receiving all data processing certificates for completion of destruction. All data is to be destroyed to a minimum of shred No. 3 of EN 15713. The data processor must be registered for their services.

Protection Class 3:

Destruction processes of data in protection class No. 3 are to be implemented and provided through a certified data processing firm receiving all data processing certificates for completion of destruction. All data is to be destroyed to a minimum of shred No. 5 of EN 15713. The vendor must be independently certified to destroy paper and digital data beyond reconstruction and they must be registered for their services with the policing authority in the relevant Country.

Visit: https://www.securityinshredding.com/ for more information on a confidential shredding service.

Data Protection Ireland Today

Posted on by
Reply

Data proccesser and data commissioner

Secure document destruction in Ireland can come in the form of an onsite paper shredding service or an off site paper shredding service. Data comes in many forms and The Data protection Act is in place to ensure that this data is protected.

Data Protection is a vital for a business to succeed and remain in business. If customers or users know that your service does not protect your data. It will be a massive loss to business and business reputation. Your business can suffer from a severe penalty for not protecting your data.

An interesting article written by Colm Gorey titled “3 issues defining data protection in Ireland today”   The issues discussed are relevant to today’s business. The 3 topics discussed were:

  1. ISO 27018: Cloud computing privacy standard – one year on

  2. Personal data and your right to access it — Ireland vs the UK

  3. Challenges to data protection under the internet of things

The first point talks about the governing of personal data through cloud based systems. Standards have being created to ensure the protection of data and were received well by Data Security experts. The ISO 27018 standard can be read here. Cloud computing has become a major asset to business functionality and knowing what cloud based systems are doing with your data should be investigated and researched when changes if any occur.

The second point refers to Irish and English law. Although both countries have similarities the law for each country does vary and in particular with personal data and access to it. Your business must abide by the rules in place of the country it is based in. A good example of how country laws differ can be read at this link.

Awards of Damages for Data Protection Breaches – UK and Irish Approaches Contrasted

Thirdly the internet of things (IOT) refers to the general use of internet and internet services. Governments and official bodies are trying to develop ideas or frameworks that will regulate the internet of things. What has happened is the EU 28 data protection bodies.

for more information on data protection and a confidential shredding service please visit: https://www.securityinshredding.com/

 

 

Dangers Of Data Breaches For Small Businesses

Posted on by
Reply

Heartbleed Data Theft

Secure document shredding in Dublin and throughout the country are services needed to ensure your business is complying with Data Protection laws. These laws are in place to ensure businesses that possess sensitive data are protecting against vulnerabilities both physically and digitally.

Cyber criminals will target small businesses. In the UK the minister for the digital economy Ed Vaizey outlined (2015) that a major security breach for a small business in the UK could cost as much as £310,800. This figure also applies to Irish businesses and any small business in operation.

Dataprotection.ie have detailed descriptions on how to protect your business and improve its security. The site has guidelines to improve your business security. Researching online can be difficult because you will read conflicting reports and incorrect information. The data protection site provides you with useful and up to date information from a governing body to help improve your business security and data protection.

On the site is a guideline to improve your data security. It covers the law to software and IT support to use. With a little bit of know how and awareness to possible threats will benefit you and your business greatly.

There are 19 steps in total on the guideline page which can be read in full at data security guideline page, below are a steps from said list.

1. Install an Anti Virus Software

It is a necessity for any electronic device that transfers data. Anti Virus software protects more than just your computer, it also protects your emails and personal details when online. Malware is a big threat to computers and using a reputable ant virus will benefit.

Remember to update the anti virus software regularly as anti virus software can only protect against known viruses.

2. Firewalls

Firewalls are a essential form of protection where there is external connection. Always on internet is now a common practice for businesses. This makes a properly configured firewall a good form of security.

3. Wireless networks

When using a wireless network in your own business network make sure that proper encryption is setup on the wireless network. Be aware when using public networks such hotels and airports can potentially a risk. Use it if necessary and if you are transferring personal data make sure to be in a secure session on the device.

4. Human Factor

Is often over looked and is often used to breach a business. For example cyber criminals have accessed user accounts by using passwords such as “123456” and or “password.” Sounds crazy but happens more often than you would think. Use a more cryptic password. What the password contains will help its strength but the more characters used the greater the strength.

Also be aware of printed documents that may contain sensitive data and if not disposed properly can be accessed. Having a reputable Shredding Service dispose of your documents securely and safely.

For more information on a secure shredding visit: https://www.securityinshredding.com/  for more information.

 

Data Processors And Data Commissioner

Posted on by
Reply

Data Protection Commissioner

Mobile Paper shredding throughout Ireland and the companies that provide confidential document destruction are governed by Data Protection laws and the Data Protection commissioner. This can be broken down into two parts.

Data Processors

Security in Shredding are registered Data Processors with the Data Protection Commissioners Office. So what is a Data Processor one may ask; a Data Processor is a company, organisation or person who processes data on behalf of a Data Controller. “This does not include employees who process data in the course of their employment.”

“Cloud providers are also generally Data Processors.”

“It is possible for one company or person to be both a data controller and a data processor, in respect of distinct sets of personal data. For example, a payroll company would be the data controller in respect of the data about its own staff, but would be the data processor in respect of the staff payroll data it is processing for its client companies.”

“A data processor is distinct from the data controller for whom they are processing the personal data. An employee of a data controller, or a section or unit within a company which is processing personal data for the company as a whole, is not a “data processor.” However, someone who is not employed by the data controller, but is contracted to provide a particular data processing service (such as a Security in Shredding providing and conducting a confidential secure data destruction service) would be a data processor.

Responsibilities of data processors

The Data Processor must only process personal data on the instructions of the Data Controller, for example, the Client (the Data Controller) schedules an on-site service delivery where by Security in Shredding (the Data Processor) arrives on-site to conduct on-site shredding of the clearly identified material for destruction. The responsibilities concern the necessity to keep personal data secure from unauthorised access, disclosure, or destruction unless confirmation is received prior to doing so.

“In addition all data processors, whose business consists wholly or partly in processing personal data on behalf of data controllers who are required to register, are also required to register with the Data Protection Commissioner as a data processor.”

For further information about Data Processors please click on any of the following website addresses;

www.securityinshredding.com

www.dataprotection.ie

www.aurthercox.com

Also available in the Limerick area and please visit:

www.securityinshredding.com/limerick-shredding-services.php

The Importance Of Uniforms In An Office

Posted on by
Reply

Security in Shredding Logo. 2014.

Onsite paper destruction and off site paper destruction in Ireland and in general should incorporate a uniform for a number of reasons.

Uniforms for Corporate Branding

Having a distinctive uniforms in the colours associated with the company can assist in the establishment of an impression in the mind of the consumer. Security in Shredding’s uniforms identifies its employee’s as individuals who are associated with it and its service’s, and it helps to brand the company by distinguishing it from the competition. Consistency in employee’s appearance can create a positive impression on the customer and contribute to the projection of the Security in Shredding’s corporate image.

Uniforms for Portraying Competence

Uniforms can enable customers to identify employees eliminating the possibility of a customer mistakenly asking a member of the public for help. Employees wearing a uniform encourage confidence in the client by portraying  the individual is a professional with service knowledge and a eagerness to help. A uniform puts the force of the corporate reputation behind the individual, making him look reliable and trustworthy as a company representative.

Uniforms to Promote Security

Just as a Gardaí or Army uniform identifies an officer, Security in Shredding’s uniform identifies its employee’s who are out onsite conducting a service call or delivery to a client’s premises.

Uniforms to Eliminate Dress Codes

Having a compulsory requirement for Security in Shredding’s employees to wear its uniform eliminates the need for creating and enforcing a dress code. Enforcing a dress code can lead to hard feelings on the part of employees who are told that their attire is not appropriate for the workplace.

Overall it is important to Security in Shredding that its employees are always dressed in uniform for their job roles and are neat and tidy at all times.

At Security In Shredding we apply these methods to our staff on with all onsite calls for both yours and our benefit.

For more information about Security In Shredding please visit:

https://www.securityinshredding.com/

Choosing A Shredding Service Dublin Area

Posted on by
Reply

Importance of Paper Shredding for Dublin

Secure document shredding services are available throughout Dublin and greater Dublin area. Onsite paper shredding services in Dublin are available to benefit you and ensure your documents are securely dealt with.

Data protection and Data destruction methods are now mandatory for all businesses. The Data Protection Act requires you to have these methods in place or you could be liable for any data breaches if they occur. Sensitive or personal data that is not secured is often the cause of identity theft. It can easily be done if documents are not securely destroyed.

Before choosing a shredding service, it is worth researching the shredding service before using them.

What to look for when choosing a shredding service:

A Compliant Secure Shredding Service

Ensuring that the shredding service is both professional and secure in its business document destruction. The Din 66399 and EN 15713 standard should be sought when choosing your shredding service. This is a European standard and shredding companies must comply by these standards.

What to Shred

If your business uses and or posses a person’s information, then a shredding service is required and should be implemented by all organisations.

The link details the kind of information that needs to be shredded.

What To Shred

On Site Document Destruction Service.

A reputable shredding service will be able to call out to your premises regardless of location. The on site call out can save you and your organisation on time and effort and the document destruction can also be supervised by a member of staff to ensure documents are being destroyed in a professional manner.

Shredding Volumes

It is also worth researching the volumes of paper a shredding company can handle for your business. Your business or organisation may have a large quantity of documents with your own and other sensitive information that you don’t want accessible to people outside of the company.

References

Enquiring with other companies that use a shredding service in their business is worth looking into. It is important to know how the shredding service works and if it will apply to your own organisation. if the shredding company has satisfied customers is worth researching before committing to the service.

For more information on secure document and bulk paper shredding please visit:

https://www.securityinshredding.com/

6 Methods To Increase Security In the Office

Posted on by
Reply

irish data breaches, Data Protection, Paper Shredding, Data Destruction

Security In Shredding provide industrial paper shredding and secure document shredding services throughout Limerick, Dublin, Galway, Cork and Waterford areas. We strive for proper and secure service and ensure data security for your business.

Security is paramount to a business and to a business that possesses client data. Any client data weather its sensitive or not must be protected by you. There are a number of ways for a person could breach a businesses security. Knowing these potential breaches and setting up preventative and deterrent methods throughout your business will benefit you and your business. If customers are aware that a businesses data protection is not secure will be harmful to for your business.

Below are a number of methods to help you improve your security for small businesses.

1.    Equipment needed for the size of the office

Choose the equipment based on the type of office you have. Is the space rented? then you may need to use a system that does not interfere with walls and structure. An open office space would require less equipment as it can monitor a greater area. Before choosing a security plan assess the area you are in before committing.

2.    Decide how many cameras you need

Deciding on the number of cameras should also be considered. Do you want to cover all the office or important areas such as supply or equipment rooms. If you are getting them installed professionally, get a consultation before installation.

3.    The type of camera needed

Cameras come in various shapes and sizes. Do you want a camera to rotate to cover a greater area. A disguised or concealed camera to better fit your space. A camera with night vision can also be used.

4.    Additional Sensors

Along with cameras you could also use motion sensors. These are often more discreet and harder to spot in a room. Magnetic sensors are also easy to conceal and a simple and effective security sensor. Consulting with a professional will give you the best process to adopt for your office space.

5.    Mobile Alert System

An alert system is important for the business and setting up the right alert system for the office. Take into account how busy the office is. Are there people in the office after hours needs to be considered to avoid alert spamming. Any reputable security system will have an alert system available on your mobile device.

6.    A Reputable Provider

Research various security installation firms. Find a plan that suits your companies needs and be aware of added costs. Enquire about scalable contracts if you choose to expand your office. Security firms must abide by standards and processes to be recognised as a security firm.

A reputable shredding service also provides added security for your business. Fore more information on a shredding service please visit: https://www.securityinshredding.com/

 

Secure Paper Data Just As Important As Secure Digital Data

Posted on by
Reply

confidential shredding

Secure Document Shredding is integral for businesses to succeed. Confidential shredding services are widely available in the Limerick, Dublin, Galway, Cork and Waterford areas across Ireland.

Protecting paper data just as important as protecting digital data

With a lot of emphasis on digital records and cyber security, we must remember not to forget that paper continues to be a major course of breaches in many organisations.

There are many breaches that don’t catch the news headlines but when investigations are conducted within the organisations it is discovered that the vast majority of data breaches occur from the mishandling and improper disposal of paper data in offices by staff.

How do you reduce & eliminate paper Data Breaches you may ask?

The answer is simple;

  • Limit the authorisation of personnel to restricted files
  • Store all restricted files in one central location
  • Install company policies and ensure compliance
  • Manage all out of date files securely and confidentially
  • Source a secure, professional, certified Data Destruction Service Provider
  • Conduct in house audits for non-compliance of Data Management Policies
  • Seek advice from a professional certified and recommended Data Destruction Service Provider

Security In Shredding has over 30+ years experience in the provision of specialist services. With this knowledge we ensure that all staff abide by these standards. It is imperative now more than ever that companies use a proper shredding service in Ireland. Companies that hold sensitive data can be held liable if data breaches occur without proper security measures in place.

Small office shredders do not offer the same data protection as our shredding units. In fact Security in Shredding in 2010 developed and introduced the first of its kind in the world, high volume confidential paper shredder that meet Shred No. 6 of EN 15713.

It is easy to maintain data security with a little bit of know how and using a reputable shredding service will ensure that your business details are maintained and destroyed securely.

If you require any information regarding reducing and eliminating the risk of a data breach in your organisation contact us or visit our site https://www.securityinshredding.com/

5 Reasons In Ireland To Employ An Onsite Confidential Shredding Service

Posted on by
Reply

Security in Shredding Data protection & destruction

A confidential shredding service is vital for the success of business. on site paper destruction and or off site document shredding can be availed from a reputable shredding service.

In today’s ever advancing technology arena it is essential for Organisations to be aware of their responsibility for the confidential shredding of their waste paper data. Many Companies globally are aware of the risks associated with not destroying confidential information in line with legislation and many will have a detailed shredding policy in place to mitigate this risk.

This policy may be an in-house confidential shredding service or an outsourced confidential shredding service Ireland. Completing this duty in-house has proved to cause more problems and increase risks upon a given Organisation. Many management people feel that an in-house system is more cost effective however in the overall picture of the situation an in-house system may not at all be the best option when deciding upon the best confidential shredding service to implement.

  1. Office shredders producing strip shreds are NOT secure!!

The general office shredder design will cut the waste paper data into vertical strips which has been proven not to be secure and not meet international security standards. When deciding upon creating a confidential paper shredding policy it is essential to be aware that it should be a cross cut shredding technology that is used and for high security material it should be a double cross cut shredding technology that in turn will create a particle shred that is complaint up to shred No. 6 of the security standard EN 15713. In English terms this translates to ensuring that the data is destroyed beyond reconstruction which a professional confidential shredding Ireland vendor will certify for. A generic 15.5 mm cross cut shredder may be reconstructed with the aid of technology.

2. Shredding by hand wastes time

Daily business activity can amount to kilos of waste paper data being generated every day. As days go by and the kilos compound to become bigger volumes a hand fed shredder simply is not a time efficient method. Taking care of your shredding in-house can be time-consuming and a waste of staff resources, skills ad this is amplified if the company is large. It will take a professional paper shredding Ireland company a fraction of the time to securely shred the same amount of documents and due to the capacity of the shredder.

3.  In-house shredding does not mean compliance

Proof of destruction through a data processing confidential shredding service vendor is essential in illustrating the client’s compliance with the law both from a Data Protection point of view and a waste management point of view. This is not possible officially with an in-house company shredder as there are no certifications available to illustrate your compliance.

4. Storage constraints

When you produce sensitive data that needs to be destroyed you are legally obliged to ensure that the data is keep safe and secure. This results in controlled access, time logged transportation and secure receptacles holding the material just to name a few. Unless an organisation wishes to make the huge investment in acquiring receptacles in many cases it may not be viable for them to put in the required safety precautions. It is important that your paper shredding Ireland vendor will provide you with the required security receptacles to ensure your compliance with the law.

5. Reliability Issues

All business will produce high volumes of waste paper data and generic office shredders are not designed to handle high volumes efficiently. The unreliability of office shredder mean that contingencies are constantly required in this situation which in many cases simply are not financially viable to do. A professional confidential shredding service vendor will use technology that will not break down due to volume constraints and the technology can easily handle the staples, clips and archive folders that all waste paper data contains.

For all questions relating to shred sizes and destroying data beyond reconstruction please visit www.securityinshredding.com.