October 2008 Archives
Under the Federal Records Act each federal agency, with help from the National Archives and Records Administration (NARA), is required to maintain records that document their organization, functions, policies and activities. It is explicitly noted that Federal records should not be destroyed except when in accordance with the procedures described in Chapter 33 of Title 44, United States Code. Recently, in the Washington Post, we find out that not only does the White House lack a comprehensive email archiving solution but past solutions have been riddled with numerous record-keeping problems: (read more)
Phishing as a security risk has come a long way since its infancy and while phishing has changed its style; one thing that hasn't change is its effectiveness in attracting victims. By combining modern technology and social engineering to gain access to information such as credit card numbers or passwords, criminal activity is flourishing across the Internet. In the May 29th, 2008, Quarterly Trends and Analysis Report by US-CERT (United States Computer Emergency Readiness Team), the top reported security incident was phishing. The documented risk noted by US-CERT bears itself out in statistical evidence tracked by organizations such as the Anti-Phishing Working Group (APWG) which showed the number of unique phishing sites reported between January and March of 2008 was a combined 81,215. These staggering numbers highlight the reasoning behind the FTC Red Flag Rules. (read more)
If your company acts as a creditor, hopefully by now you have heard about the 26 FTC Red Flag Rules that you must be in compliance with by November 1st, 2008. The FTC reports that an identity is stolen every 4 seconds; and in 2007 identity theft was the number one consumer fraud complaint received by the FTC. So, it is easy to see why these rules and the associated penalties for non-compliance have been formed. (read more)
These are just some of the reasons that software-as-a-service (SaaS) solutions have taken off in recent years. Organizations don't want to pay large up-front licensing costs for software they may never use. Instead they are opting to pay for solutions as they need them so they only incur costs as their organization grows. In so doing, they can easily obtain software and pay for it as their specific business needs change. (read more)
