Now Available:

line

Featured Resources:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Rebecca.

« FTC Report on FACTA Effectiveness: Highlights the Need for Better Data Accuracy Practices | Main | U.S. Naval War College Network and Website Still Down From Hack Over Two Weeks Ago »

Laptop Theft: PII About 1,000 W.Va. Air National Guard Members

A report in the Air Force Times indicates a laptop containing personally identifiable information (PII) about 1,000 West Virginia Air National Guard members was stolen during a training trip in November. The spokesperson for the Air National Guard indicated:

"The Air Force uses some of most sophisticated encryption processes to safeguard information on government computers"

...implying the data on the laptop was encrypted, but not coming right out and saying it was.

If it was encrypted, it is likely that this incident would not have been reported.

In the report the spokesperson also said the notification letters warned the involved individuals "to be alert for identity theft."

Hmm...wonder if the data was encrypted or not? Is this an indication that perhaps someone was not following the policy to encrypt the data that was on the stolen laptop?

Strong sanctions must exist and consistently be applied for them to be followed and be effective.

TrackBack

TrackBack URL for this entry:
http://www.realtime-itcompliance.com/type/mt-tb.cgi/251

Comments

With the frequency of laptop theft these days, there is no excuse for companies to keep data on laptops unencrypted. I agree with you that there is a need for harsh repercussions. In the past six months alone, thousands of people have become at risk for identity theft because companies are being irresponsible about security measures... yet virtually nothing has been done to prevent further data breaches.

With the frequency of laptop theft these days, there is no excuse for companies to keep data on laptops unencrypted. I agree with you that there is a need for harsh repercussions. In the past six months alone, thousands of people have become at risk for identity theft because companies are being irresponsible about security measures... yet virtually nothing has been done to prevent further data breaches.

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Rebecca Herold's Bio:

Rebecca Herold, CISSP, CIPP, CISM, CISA, FLMI, has been providing information security, privacy and regulatory assistance and services to organizations from a wide range of industries for the past two decades. Rebecca was instrumental in building the information security and privacy program while at Principal Financial Group, which was awarded the CSI Information Security Program of the Year Award in 1998. IT Security ranked Rebecca as one of the top 59 IT security influencers, and Computerworld put Rebecca their list of the world's best privacy experts and on their list of the best privacy consulting firms in both 2007 and 2008. Rebecca has been CPO for two consulting organizations, and has had her own information privacy, security and compliance business since 2004. Rebecca has written chapters for several books, dozens of articles, and has been writing a monthly privacy column for the CSI Alert newsletter since the beginning of 2001, and is working on her 13th book. Some of her other books include The Privacy Papers, Managing an Information Security and Privacy Awareness and Training Program, The Definitive Guide to Security Inside the Perimeter (Realtime Publishers), The Shortcut Guide to Improving IT Service Support through ITIL (Realtime Publishers), and The Practical Guide to HIPAA Privacy and Security Compliance. In addition, Rebecca is the leader of The Realtime IT Compliance Community where she posts to her IT Compliance weblog. You can contact Rebecca at: rebecca_herold@realtimepublishers.net.