Tag Archives: Dublin Document Shredding

Why Company’s Need To Address Improper Document & Data Disposal

Posted on by
Reply

data destruction and collection service

Secure document shredding specialists deal with physical and digital data on a regular bases. How we handle this data is important to ensure confidentially. Confidential shredding and data protection go hand in hand to prevent data breaches occurring.

It is widely known that employees and hackers are biggest cause of data breaches. There have being high profile hacking cases involving employees inappropriately clicking on links that  permits the hackers access to the organisations network and software system.

In order to have an appropriate confidential document and data disposal system in place, you should firstly contact a service provider whom has ample experience in the industry with a 100% clean track record (i.e. an occurrence of zero data breaches). Such a Data Service Provider will be able to answer all your queries and concerns regarding how to implement a secure and efficient document management system – all the way to end of life documents as well as in-house training of staff and policies and procedures. “At the end of the day, you are relying on employees to manage confidential documents in a secure and confidential manner.”

privacy-data-security

In order for one to have piece of mind, a training programme should be established for the induction and on-going training (in-house) for the organisations employees. When the employees understand the importance of efficient and accurate Data Management and Data Protection Legislation; it minimises the risk of a data breach.

When the data reaches its end of life, it needs to be securely disposed of. This is where a certified professional Data Processor like Security in Shredding provides (at the clients choice) onsite and/or offsite data destruction. A company such as Security in Shredding are specialists in the entire area of Data Management. They have an unblemished record and provide a professional, certified and recognised data destruction services.

In order for an organisation to maximise compliance in the workplace, proper appropriate disposal of information has to be made easily accessible for the employee.

Security in Shredding do not recommend placing a recycling bin in close proximity to a printer of copying machine for example as employees can easily discard the unwanted copies or data into the recycling bin. However, Security in Shredding can implement secure lockable consoles throughout the building in specific locations as requested by the organisation and also in close proximity to the copying or printer machines.

If you wish to have a conversation with any of our Data Consultant Specialists, you can pick up the phone and dial +67 24848 or email us at info@securityinshredding.com.

10 Threats Against Data Security For Small Business

Posted on by
Reply

privacy-data-security

Bigger companies incorporate off site data destruction practices, small businesses often don’t have the financial resources to house large scale IT departments, purchase the latest and greatest technology or invest into data security.

Many a cash-strapped small business finds itself operating its critical systems on computers that are old, slow and often times insecure. This leaves them susceptible to a wide array of security pitfalls and privacy threats, including data leaks and identity theft.

Fortunately, beefing up your security doesn’t necessarily mean draining your bank account. There are many inexpensive options to improve the security of your small business and protect your information.

Geoffrey Arone, serial entrepreneur and co-founder of SafetyWeb, gave his take on 10 very real threats facing small businesses and how they can be addressed in ways that are free or inexpensive.

1. Data Breach Resulting From Poor Networking Choices
Enterprise-level networking choices that are found in large IT departments around the world carry costs that price small or medium businesses out of the market. SMBs that have networks often use networking devices targeted at home users. Some may forgo the use of routers at all, plugging directly into the internet.

Business owners can block most threats by using a quality router, like a NETGEAR or Buffalo brand router, and making sure to change the router password from the default to something more secure.

2. Data Breach Resulting From Improper Shredding Practices
Trivial as it may seem, dumpster diving identity thieves target businesses that throw out paperwork without shredding it. Your small office shredders will NOT suffice for a secure document destruction, but a industrial paper shredding company is a wise investment if private or sensitive information is printed and shredded daily.

3. Identity Theft Resulting From Public Databases
Individuals, especially business owners, often publish lots of information about themselves in public databases. Businesses are registered with governments, telephone numbers are in the phone book, and many individuals have social media profiles with their address and date of birth. Many identity thieves can use information obtained across various public forums to construct a complete identity.

4. Identity Theft Resulting From Using A Personal Name Instead Of Filing An OA
Sole-proprietors that have not registered a business name to receive “operating as” designation are at a far higher risk of identity theft due to their personal name, rather than their business name, being published publicly.

5. Tax Records Theft Around Tax Time
Businesses should ensure that tax returns are dropped off at the post office and refunds are collected promptly from the mailbox. Identity thieves often steal tax returns from an outbox or mailbox.

6. Bank Fraud Due To Gap In Protection Or Monitoring
Business owners know that it is vital to balance their accounts every month to ensure that checks are not being written out of business funds by embezzlers, but many businesses rarely, if ever, check what kind of credit accounts have been opened under the business name. Monitoring services like myID.com can alert business owners when new credit accounts are opened fraudulently.

7. Poor E-mailing Standards
Many businesses treat e-mails as confidential communications, but this is far from the case. They are available to a number of people other than the recipient. It’s more appropriate to treat e-mails as postcards, rather than sealed letters.

8. Failing To Choose A Secure Password
In fact, many security experts are recommending the use of a pass phrase, rather than a pass word. Pass phrases are several words long, at least three, and are far more secure than passwords. A pass phrase like “Friday blue jeans” can be typed far quicker than a complicated password, and it doesn’t need to be written down on a post-it. The length of a password increases security.

9. Not Securing New Computers Or Hard Drives
Businesses that had their IT system professionally installed may opt to upgrade a computer or two by themselves. This is strongly discouraged on a business network, as new computers must be professionally secured or else they pose a serious threat and an entry point for hackers.

10. Social Engineering
Social engineers are individuals that call and claim they are from another organization. They may even claim to be with a firm that a business owner does business with. If someone you do not know calls on the phone, be sure that it is the person you think it is before revealing passwords or confidential information.

For more information on a paper shredding or confidential document shredding service in the Cork, Limerick, Galway and Dublin area, please visit: https://www.securityinshredding.com/

Like, Subscribe and Follow us on Twitter: @Securityinshred

Addressing Incorrect Data Destruction Habits

Posted on by
Reply

Data Protection, Paper Shredding, limeirck paper shredding

Shredding confidential paper in a business must be done and there are legislations in place to protect against data breaches. Failure to enforce these laws or inadequate data protection in place by a business will result in a hefty fine of up €100,000.

Human error is is arguably the biggest cause of data breaches are caused by employees and contractors. Human error is not solely to blame. Even high profile hacking cases involve employees inappropriately clicking on links and allowing the bad guys in. It is quite easy with a little bit of know how you can be easily tricked and baited into clicking a malicious link that will cause a data breach.

When it comes to proper data destruction, or avoiding data breaches due to improper destruction of data and confidential information. It comes down to employees knowing the dangers and pitfalls of potential data breaches within the office. Despite any amount of training, however, there is one lesson too many data controllers have learned the hard way. In order to maximize compliance, proper disposal of information has to be easy for the employee.

Some organisations might require employees to use a shredder in the copy room which is not easy. So much so that it is not even reasonable to think they will consistently do it. Whether because of carelessness, workload issues, pressures outside work, or laziness, compliance failure is inevitable. Nor is it reasonable to give employees the discretion on what is destroyed or options on where information-bearing media should go. Whenever a recycling bin is next to a shred bin, it is easy to find confidential information in the recycling bin. Making this process as easy as possible for our customers is recommended. We clearly have each console labelled so our customers know exactly what we can and can’t take in our locked consoles. We provide staff awareness days to help businesses improve their data security.

Data Protection, Secure Paper Shredding

The same goes for IT asset disposal. Since employees are less likely to toss out computers, it can be less of an issue. However, leaving the decision to the IT department instead of dictating the procedure through security and compliance can cause a problem. With electronic storage devices there is no true way to destroy the data using software. A physical destruction of the device must be done to ensure data destruction.

Educate and Awareness for you and your employees benefits with proper data destruction. Contacting a Secure Confidential document destruction service to incorporate into the business practice will improve your data security and destruction.

For more information on a secure document destruction service in Ireland, then please visit: https://www.securityinshredding.com/ or

please like, share and follow us on Twitter: @Securityinshred

Shredding Documents Before Recycling Them

Posted on by
Reply

Data Protection, Paper Shredding, limeirck paper shredding

Paper data still plays a major part of industrial paper shredding. It is important that you are Shredding confidential paper before it is put into recycling. This is to ensure that your data is protected and cannot be viewed by public eye.

Paper like any other recycling is often left in the blue bin outside your home or business for it to be collected. This is a common practice and nothing wrong with it. If your recycling contains documents of a personal nature and or sensitive data nor for public knowledge, how it is disposed needs to be taken into consideration.

It is quite easy to access anything contained in these bins and within an urban area someone in a “white van” and a high vis jacket could pull up and throw these bags into the van. What they do with these documents may be unclear but can be malicious intent. Having the documents shredded before it is recycled will increase your data security.

Shredding Documents

A good practice for your business to incorporate is to shred your document before you put them into recycling bin. Also to be aware that a simple office shredder does NOT provide adequate data destruction. This data can be reconstructed. An industrial paper shredding service provides you with secure paper shredding. Incorporating a service to handle and destroy your documents should be used.

Scheduled Onsite Collection

A reputable shredding service will provide you with a collection service to handle and securely destroy documents you have. Ringing your shredding service provider and organising a collection at a time specified by you will ensure that you know when your documents are to be transferred.

A shredding service can provide you with sealed bags for collection and shred them in off site paper destruction location. A shredding service can also provide onsite shredding service with their specially designed trucks to handle and destroy these documents.

Data Protection

Under the EU directive the data protection act and the data protection commissioner are governing bodies in place to ensure that businesses handle data correctly and ensure sensitive data is used in a correct manner.

For more information on a reputable shredding service in Ireland please visit:

https://www.securityinshredding.com/

The Disadvantages of Office Shredders

Posted on by
Reply

Paper Shredding

Data Breaches and Data Security go hand in hand and a incorporating a confidential shredding service will benefit you and your business significantly.

As a result of people becoming increasingly aware and vigilant of their confidential data and conscious of what readable files are disposed off in their bins, small office shredders are consequently on the rise. Many offices have an office shredder tucked in the corner or next to the printer; but in reality these small devices are putting your employees at risk, draining your time, compromising your security and also shredding your money so to speak.

Whereas if you outsource the destruction of your documents to a certified data destruction professional you are eliminating the length of time an employee has to spend feeding the small office shredder, eliminating a data breach, managing your end of life documents efficiently and appropriately reducing the amount of down time an employee spends in the working day.

Is an office shredder safe?

An office shredder is no shortage of blades, cutting knives and teeth moving at a few thousand RPM and it is usually placed in an easy to access area for people to use it. An office shredder cannot tell the difference between a paper and other items, such as:

  • Stray clothing e.g. ties, blouses/ shirts
  • Jewellery
  • Long sleeves
  • Fingers
  • Hair

People don’t realise that if a piece of paper gets stuck in a shredder; most people go to the power point to turn it off. What if it is battery powered? Would you know the shredder was completely powered off?

It’s easy to see how with no training, such a simple device can be a danger to a first-time user.

Time Consuming

The typical office shredder will boast a shredding power of between 3-5 sheets at a time, sounds acceptable but if one is shredding a 30, 50 or 100 page document will soon become a wearisome and time consuming task. Office shredder Manuals will have illustrated  that staples, paper clips or other tough bindings must be removed prior to shredding. Taking these out one by one and checking through pages and pages of paper for stray staples or clips is more time consuming than one might think.

Confidentiality

Why shred the documents you might ask?; The primary reason for shredding your documents should be to maintain confidentiality and security and ensure zero data breaches occur. Many standard budget shredders will cut paper into roughly 40-50 strips, which may seem like a lot, but it wouldn’t take a smart and determined criminal too long to re-assemble 50 strips of an A4 piece of paper and restore it to a legible condition.

Therefore by employing a registered Data Processor whom is a certified shredding service professional to complete all your data destruction requirements; will not only free up employee time but eliminate risk of a data breach and maintain the high level confidentiality that you require.

Cost

It’s difficult to put a cost figure on the security of your information, which is why a professional, efficient and secure shredding service is always advised. The actual cost of an office shredder may initially appear as a cheap investment in comparison to the cost of the services of a certified, registered shredding service provider but from employing a Data destruction service provider you will have little or no employee down-time, guaranteed destruction of documents and 100% total piece of mind.

The shredding service provider removes the shredded paper material from the clients location and transports the shredded material to the licensed waste recycling facility and off-loads the material as part of the cost.

If you’re thinking of making the change from an office shredder to a registered, certified, professional data destruction service provider, you can contact us for our professional advice and affordable prices.

For information on a confidential shredding service please visit:

https://www.securityinshredding.com/

When To Disclose A Data Breach

Posted on by
Reply

iCloud security wake-up call, data brach

Secure document destruction methods must be in place to comply with Data Protection laws. A confidential document destruction service will benefit your business and its Data Protection.

Technology has brought us accessibility to a global market and small businesses have benefited greatly from this boom in technology. With a greater number of devices connected to an online service has also meant that a increase in the number of cyber attacks. Small businesses in particular are now being targeted.

A report from the Wall Street Journal has shown that small law firms are targeted the most due to the potential high profile client base they may have. That being said law firms do not usually hold social security information and the information obtained by hackers may not be beneficial to them.

Under American law, law firms are required to inform the public that a breach has occurred.

Data Protection Commissioner

Under Irish law the Data Protection commissioner has Data Breach guidelines for you and your business to follow. If a breach occurs it is paramount that the matter is dealt with swiftly to minimise damage. Data Protection Commissioner data breach guidelines can be found at the link below.

https://www.dataprotection.ie/docs/Data-Breach-Handling/901.htm

The document informs you on what steps to take if a breach has occurred. With this guide you can easily follow the steps needed to take and the information to provide when informing the Data Protection commissioner.

“Failure to comply with these obligations can result in a criminal prosecution with fines up to €5,000 indictment €250,000 per offence.” 

The document also state “Prevention is better than cure.” Setting up company policies and practices for handling of sensitive data should be implemented immediately. A reputable Shredding Service will also improve Data Security within your company. A shredding service will be able to provide an onsite shredding service. Confidential shredding is paramount to shredding services.

A reputable shredding service will comply with the protocols provided by the Data Protection Commissioner. It is a governing body to help protect your personal data and the data of others.

Please visit our site for more information on a Confidential Shredding Service:

https://www.securityinshredding.com/

Full Article Wall Street Journal Report:

https://blogs.wsj.com/law/2016/03/30/when-do-law-firms-have-to-disclose-data-breaches/ 

 

Data classification and identification

Posted on by
Reply

Security In Shredding on site service, Onsite shredding service

Confidential shredding in Cork and throughout the country can incorporate a off site document shredding service to promote good business practice.

Internal Data classification and identification is when an Organisation tags their data so it can be managed effectively, securely processes, found quickly and destroyed appropriately.

It is a beneficial exercise for many Organisations as it helps to de-duplicate data stored on devices, this de-duplication vastly speeds ups data searches while also saves upon revenue in the form of storage capacity and back-up requirements for a given Organisation.

This exercise is also required for Organisations who need to meet legal and regulatory requirements for destroying the information beyond reconstruction, not holding information longer than necessary in addition to enabling an Organisation to retrieve specific information within a set timeframe.

Data strategies vary significantly from one organisation to another for many reasons. For example, many may generate different types and volumes of data that are subject to differing legislative requirement and responsibilities. The balance of information type can vary from one user to the next between e-mail correspondence, images, video files, office documents, customer and product information, financial data just to name a few.

It may seem a good idea to tag and classify everything within your Company database however experts here and abroad advise against this due to high costs and success rates within Organisations. Certified database technology is available for Organisations however; this method seems to work best for Governments with an allocated budget for the activity.

Alternatively, it is advised that Organisations can choose certain types of data to classify into the main segments of your business, for example; account data, personal data and commercially valuable data.

It is advised that an Organisation’s data is to be classified in line with their confidentiality requirements. It is important to carry out an information audit at this stage which in turn will give you an accurate view of the nature of the data.

It is essential for an Organisation to ensure that the data it is classifying is of good quality, “Common pitfalls for Organisations is that too much rubbish is allowed to accumulate, from duplication to copies of office party photos to personal letters to bank managers”, storage cleansing technologies are extremely useful at this stage to eliminate obsolete, trivial or redundant content.

Once the classification system is up and running it is important that management and staff take part in periodic reviews as it is not set in stone and business developments can translate to design changes in data classification.

Once the data has been classified an Organisation is empowered with the ability to tailor procedures for specific data in order to maintain regulatory compliance.

Secure Destruction of Sensitive data.

When destroying information whether it be hard paper data or digital data on data carriers it is essential for Organisations to ensure that they comply with regulations and are not proving to be negligent in their processes. For this reason, we have constructed three different protection classes for data that requires specific attention to ensure that the material has been destroyed appropriately.

 

Protection Class

 Risk

 

 Protection 1:Normal security requirement for internal data Unauthorised publication or dissemination would have a limited negative impact on the company. Protection of personal data must be ensured. There would otherwise be a risk to the position and financial situation of the affected persons.
  Protection 2:High security requirement for confidential data
Unauthorised dissemination would have a considerable effect on the company and could infringe legal obligations or laws. A personal data data-breach would result in considerable risk to the social standing and financial situation of the affected persons.
  Protection 3:Very high protection requirements for particularly confidential and secret data. Unauthorised dissemination would have serous terminal consequences for the Company and infringe upon trade confidentiality, place a data subject at risk of safety or freedom, break contracts and legal law.

It is essential that the confidentiality of personal data is maintained.

 

Destruction Tips;

Protection Class 1:

Destruction activities must be carried out in line with a detailed procedure, all staff carrying out destruction activities are to be trained. Alternatively, destruction processes are to be implemented and provided through a data processing firm receiving all data processing certificates for completion of destruction. All data is to be destroyed to shred No. 3 of EN 15713.

Protection Class 2:

Destruction processes of data in protection class No. 2 are to be implemented and provided through a data processing firm receiving all data processing certificates for completion of destruction. All data is to be destroyed to a minimum of shred No. 3 of EN 15713. The data processor must be registered for their services.

Protection Class 3:

Destruction processes of data in protection class No. 3 are to be implemented and provided through a certified data processing firm receiving all data processing certificates for completion of destruction. All data is to be destroyed to a minimum of shred No. 5 of EN 15713. The vendor must be independently certified to destroy paper and digital data beyond reconstruction and they must be registered for their services with the policing authority in the relevant Country.

Visit: https://www.securityinshredding.com/ for more information on a confidential shredding service.

Data Protection A Human Right

Posted on by
Reply

Amnesty International Data Protection a Human Right

Confidential document destruction services are vital part of business data protection. paper shredders / shredding services in Ireland have governing bodies in place to enforce and ensure people are complying with Data Protections laws.

“Encryption is a basic prerequisite for privacy and free speech in the digital age. Banning encryption is like banning envelopes and curtains. It takes away a basic tool for keeping your private life private,” said Sherif Elsayed-Ali, Amnesty International’s Deputy Director for Global Issues.

It can be hard to comprehend the benefit of encryption when using a device. What happens in the background on devices and applications can even confuse even the most informed individual. The above statement from Elsayed does put it into perspective. With a major organisation such a Amnesty international in support for data protection, ensuring your business protects its data needs to be paramount.

The Data Protection Act is an EU standard that ensures that the access and movement of personal data is protected accordingly. These standards are in place to protect your personal information. Online usage has grown and is still growing. Access to online services and devices to use it are widely available in particular mobile devices are now becoming the no.1 method of transactions for e-commerce sites.

Using these sites or services requires and stores personal data and this data is sensitive and businesses must ensure that this data is protected. If a business does not secure its data it can be ruin a companies reputation and not to mention the penalties for a data breach from unsecured data.

There are many ways to store and display data. Weather it is electronically or paper, if it contains sensitive data it needs to be stored and destroyed securely. A document destruction service should be sought when destroying documents. A simple office shredder will not securely destroy your documents.

Media devices such as hard drives if being replaced or recycled should be destroyed if they contain sensitive data. Wiping the drive or formatting the drive does not remove the data entirely and can be retrieved.

A Din 66399 Standard is a standard set for paper shredding. This standard ensures the highest security when shredding documents and devices. When hiring a reputable shredding service this standard should be sought after.

For more information on a confidential shredding service please visit:  https://www.securityinshredding.com/

Read Amnesty International full report here:

https://www.amnestyusa.org/research/reports/encryption-a-matter-of-human-rights

Choosing A Shredding Service Dublin Area

Posted on by
Reply

Importance of Paper Shredding for Dublin

Secure document shredding services are available throughout Dublin and greater Dublin area. Onsite paper shredding services in Dublin are available to benefit you and ensure your documents are securely dealt with.

Data protection and Data destruction methods are now mandatory for all businesses. The Data Protection Act requires you to have these methods in place or you could be liable for any data breaches if they occur. Sensitive or personal data that is not secured is often the cause of identity theft. It can easily be done if documents are not securely destroyed.

Before choosing a shredding service, it is worth researching the shredding service before using them.

What to look for when choosing a shredding service:

A Compliant Secure Shredding Service

Ensuring that the shredding service is both professional and secure in its business document destruction. The Din 66399 and EN 15713 standard should be sought when choosing your shredding service. This is a European standard and shredding companies must comply by these standards.

What to Shred

If your business uses and or posses a person’s information, then a shredding service is required and should be implemented by all organisations.

The link details the kind of information that needs to be shredded.

What To Shred

On Site Document Destruction Service.

A reputable shredding service will be able to call out to your premises regardless of location. The on site call out can save you and your organisation on time and effort and the document destruction can also be supervised by a member of staff to ensure documents are being destroyed in a professional manner.

Shredding Volumes

It is also worth researching the volumes of paper a shredding company can handle for your business. Your business or organisation may have a large quantity of documents with your own and other sensitive information that you don’t want accessible to people outside of the company.

References

Enquiring with other companies that use a shredding service in their business is worth looking into. It is important to know how the shredding service works and if it will apply to your own organisation. if the shredding company has satisfied customers is worth researching before committing to the service.

For more information on secure document and bulk paper shredding please visit:

https://www.securityinshredding.com/

Paper Shredding Dublin (Data Processing Service)

Posted on by
Reply

Data Destruction (Dublin Area)

Shredding documents In Dublin as part of industrial paper shredding method for your business is now must be implemented under the data protection act.

All businesses are and if not they should be aware of their responsibility to segregate and dispose of their general waste and recycling. These rules have been established under the Irish Waste Management Act 2001 which can be viewed at; https://www.environ.ie/en/Environment/Waste/WasteMgmtActs/.

Within this Act it is essential for all Organisations to use a waste processing firm that is reputable and has the required certifications from their relevant County Council and in turn the client has full traceability of their waste materials.

When dealing with sensitive paper data that has reached its end of life hiring any Dublin paper shredding service may not be sufficient and may not achieve full compliance. Cost should never be the determining factor when hiring a Dublin document shredding service, the cheapest may not achieve compliance and it is compliance that is required by Organisations to achieve in order to protect their data and their public image.

As detailed above waste recyclers are also known as material processors, similarly companies that offer data destruction services are not only waste processors but they are Data Processors. It is this title of “Data Processor” that drastically differentiates a recycling firm from a Data Processing Firm. It is The Data Protection Acts that recognise Data Processors and Data Controllers and if a data breach occurred and it was found that for example the Dublin paper shredding firm was not a data processing firm they may argue that the Data Protection Acts do not apply to them as they were simply processing material not data. It is important for all Organisation to be aware of this point as they may be receiving a Dublin materials shredding service at a more attractive cost however, they are not receiving a fully compliance and data protecting service. The following applies to many industries and services; “The cheapest is not always the best”.

 

Questions to ensure that your Dublin Paper shredding vendor is a Data Processor;

  • Is your Organisation a member of an Industry Representation Body in Ireland?

Required Ans;  Yes

 

  • Does your Dublin Document Shredding Company process various recyclable material on the same site as the paper shredding?

Required Ans;  No

 

  • Does your Dublin Paper Shredding Company ship various material to the recycling market other than data carrying materials (e.g. Cardboard, plastics)?

Required Ans;  No

 

  • Is your Company Certified from an Independent Body in Ireland for European Security Standard EN 15713 and not “Self-Certified”?

Required Ans;  Yes, we are certified by an independent body in Ireland.

 

  • Is your Dublin Paper Shredding Company listed on The Data Protection Commissioner’s Public Register of Data Processors? Can you give me your reference No.?

Required Ans;  Yes, we are and you can see us on the list if you visit www.dataprotection.ie  

 

  • Do you use Data Processing Agreements?

Required Ans;  Yes