Search

The age of information so frequently described and anticipated in ‘gee-whiz’ language has a darker side. As recent newspaper stories and other media attention show, unauthorized tampering with computer data banks and computer programs is on the rise. And the problem will grow worse with the proliferation of microcomputers, word processors, and data networks and with the swelling ranks of people familiar with their use. Probing beyond the conventional legislative and technological solutions to computer security problems, the authors look at what managers can do to preserve the integrity of their companies' information systems. While it is no longer possible simply to delegate responsibility for computer security to data processing managers, senior managers should not rely on expensive and complex solutions, according to these authors. They argue for simple, commonsense measures and advise how auditing and control systems can be revitalized to help detect security problems before they become serious. [ABSTRACT FROM AUTHOR]

The article discusses the things to consider to address data breaches in organization. The proposed nationwide standard by U.S. President Barack Obama that would require businesses to notify customers within 30 days of discovering a breach of personal data is tackled. The things to consider include the need to know that no employer is immune to breaches, the need for email messages to be private, and include data breach scenarios in emergency and crisis planning.

The article reports on the increasing number of dangerous databases that are available in Internet in the U.S. According to the author, a security company was able to assess half a million databases from 1.16 million Internet protocol (IP) addresses does not contain firewall protections wherein mostly of them are run in Microsoft SQL Servers and Oracle databases. Security researcher David Litchfield stresses that the results poses significant risks which includes the potential accessibility of computer hackers and malicious viruses. In addition, database operators and users does not initiate their own security measures and wait for their service providers to integrate system control and database protections.

Discusses how bankers are looking to complex software systems to spot money-laundering attempts and meet demands for reporting suspicious activity. Reasons why the market is changing fast; Focus on comprehensive packages that can be integrated across multiple business lines to provide enterprisewide protection; Views of Simon Moss, chief executive of software producer Mantas Inc., James R. Richards, global manager of anti-laundering operations at Bank of America Corporation, Peter R. Janczak, director of compliance at Marshall & Ilsley Corporation, and others; Difficulties integrating a vendor's product with systems combined through multiple mergers; How vendors are beginning to offer their anti-laundering systems as hosted services running on their own computers.

Security experts have poured cold water on media reports that claim some 20,000 Australian bank accounts have been compromised by the Sinowal Trojan. [ABSTRACT FROM AUTHOR]

The article reports on the computer hackers' ability of covering security holes. Computer hackers used to create security problems and turn out as computer security researchers and experts. They also compete with each other to create credibility by finding security holes and tell the companies what they are about. However, vendors do not like the idea at all as security holes make them look bad. Computer hackers are not fully believed by companies since they are still hackers by heart. However, companies do not have much choice also but to trust them when it comes to covering security holes.