Understanding Data Security Paper

During the last Christmas season, Target announced that their data security was breached. According to David Lazarus in Los Angeles Times, Target stated that roughly 110 million customers’ information was illegally taken from their database. The information included their credit/debit card info, phone numbers, and email addresses. Target is one of the most popular grocery stores in the U.S.; they have a substantial amount of consumers. Because of this incident, consumers' trusts for the store have been decreasing. Worrying about losing its customers, the company offered a free year of credit monitoring and identity-theft protection, so the customers will feel more secure. Not only Target, some other large retailers also faced the same issues. They want their customers to trust that the companies can protect private data. However, should we not worry? Data breaches have been going on for about a decade, but we have not seriously thought about the issue. In order to protect people’s privacy, the federal government should make new laws concerning companies’ handling of customer information.

And there's yet another permutation here, whether or not you have a reasonable expectation in the privacy of data that other people are storing about you - if someone has your SSN or medical information in their database, do you have a reasonable expectation of privacy in that information remaining private? Medical is an easy answer, HIPAA basically defines your expectations for you. SSNs, DOBs, other PII? Not quite as clear cut, at least here in the

4) In IP subnet planning, you need to have at least 130 subnets. How large should your subnet part be?

Companies have an obligation to protect their customer’s information, which goes beyond that of complying with state and federal regulations. If the company loses the trust of their customers, they risk the chance of damaging

Employers have to monitor employees for security concerns relating to intentional or accidental release of sensitive data. Mohl, shows in a 2006 survey by Proofpoint Inc.

On July 1, 2003, California enacted an electronic data privacy law to protect residents from one of its fastest growing crimes: identity theft. SB 1386 (Civil Code 1798.29) requires businesses to notify California residents if a security breach results in disclosure of personal electronic data. All businesses are subject to this law regardless of size, location, or operations. Business owners should be aware of the problems associated with identity theft, the steps required to comply with SB 1386, and the preventative measures available.

Most organizations with company data files must predict that it is possible that someone would possibly hack into their files and cause a potential data breach.

I am pretty sure as a human being trying to live a successful, and a life worth living everyone wants their information to be protected as much as possible. Things such as credit card information, birth records, bank information, basically anything that has to do with money or someone’s private life

As much as a company should not invade the rights of its employees , it has the equal responsibility of ensuring that its privacy and that of its employees are not divulged or used in any personal intent by other employees . According to Nyman (2005 , more companies are being held accountable by employees whose privacy was compromised in the workplace because of what is seen as a lack in its measures to ensure their privacy . Therefore , if employers are being held accountable for such situations , Nyman believes that they should be given enough power to protect themselves from such liabilities

Both military and organizations are taking this seriously due to the increase of data breaches and the loss of PII. For at least the past two years, every uniformed, civilian, and contract member of the Department of the Navy has been required to complete training on protecting PII (Murphy, 2009). For the military and DoD the training is annually. Other organizations are conducting training annually like the military while others are bi-annually. The military and DoD training is conducted via a Microsoft PowerPoint that is conducted online. Organizations are falling suite with military and DoD for conducting training online. There is only one down fall to this, which is due to integrity. There's plenty to be said for personal integrity in training completion, but protecting PII and information systems is too important to rely on trust alone (Murphy, 2009). One way to manage and limit access to certain data is by classifying the data. The military has similar classification definitions, but wouldn’t include public due to the sensitivity of their data. Top Secret is applied to information that reasonably could be expected to cause exceptionally grave damage to the national security if disclosed to unauthorized sources. This classification would not be is similar to any of the organization data classification. Secret is applied to information that reasonably could be expected to cause serious damage to the national security if disclosed to unauthorized sources. This particular classification would be similar to an organization ‘restricted’ data. Confidential is applied to information that reasonably could be expected to cause damage to the national security if disclosed to unauthorized sources. This classification would be almost the same as an organization ‘confidential’ data. Many of the articles stated that only those with the need to know should have access to certain data. One way to manage and

What will you do if you have access to everyone’s personal information? In “Your Digital Trail, and How it Can Be Used Against You” from NPR, author G.W. Schulz & Daniel Zwerdling describe how easy the government or any other agency could get people’s personal information. After the rise of crime and terrorist attacks in the US, the government passed an ACT in order to get access to citizens’ health information. A research warrant, a court order or a subpoena are also used to get anyone’s personal information. While some people mention that having access to American’s personal information could help prevent crimes, be more secure or help to catch criminals, others argue that they do not have privacy, could be used against us or third parties could have easy access. I believe the US government should be allowed to use digital information because could help to find lost people, could be used for criminal prosecution and help to protect the life of others.

Target to the Office of Personnel Management—the private sector and government equally feel the after-effects of data breaches. Data breaches can result in lawsuits from the affected victims. Lawsuits continue to harm a company’s finances and reputation long after the data breach occurs.

The CIA, FBI, and the NSA use the information that we post online, what we like on Facebook, and what we tweet about on Twitter to build a profile of the American citizen. They have access to our private emails, that may or may not contain sensitive data, to our credit reports, and our medical records. They even have access to our current

All the consumers affected were also made vulnerable to subsequent identity theft given malicious attackers stole their personal data. Equifax was directly affected since its stock began to plunge immediately the news was made public. Additionally, the corporate governance of the company was tarnished given three Equifax executives sold shares worth around $2 million days after the breach discovery, and the “retiring” of the chief security information officers is questionable (Surane & Melin, 2017). Also, the company was exposed to litigations with some lobbyists and interest groups pushing regulators to hold Equifax accountable for the negligence and poor treatment of affected consumers. The proposed new data security laws will present a greater burden to other corporations. Two such laws are the Promoting Responsible Oversight of Transactions and Examinations of Credit Technology (PROTECT), and Freedom From Equifax Exploitation (FREE) will attract more government scrutiny and limit the type of personal data that companies can collect from customers (Alperan, Carter, & Sofio, 2017).

Individuals and corporations that are the victims of an organizations data theft may elect to sue the business for damages. As well as the legal costs involved, if the court rules in favor of the prosecution, then the business will be liable for the damages incurred. This has the potential to put the company out of business. Organizations will need to meet the compliance requirements of one or more Acts, depending upon their vertical industry. The requirement, which is broad-based, is to ensure customer privacy. This is essential to prevent personal details such as social security information, addresses, credit card information, and more, being divulged through data