in

This Blog

Syndication

Tags

News

AlertBoot offers a cloud-based full disk encryption and mobile device security service for companies of any size who want a scalable and easy-to-deploy solution. Centrally managed through a web based console, AlertBoot offers mobile device management, mobile antivirus, remote wipe & lock, device auditing, USB drive and hard disk encryption managed services.

Archives

AlertBoot Endpoint Security

AlertBoot offers a cloud-based full disk encryption and mobile device security service for companies of any size who want a scalable and easy-to-deploy solution. Centrally managed through a web based console, AlertBoot offers mobile device management, mobile antivirus, remote wipe & lock, device auditing, USB drive and hard disk encryption managed services.

UK Laptop Encryption Software: Newcastle Youth Offending Team Loses Laptop

The theft of a laptop computer could potentially affect 100 youths in Newcastle.  According to a press release by the UK Information Commissioner's Office (ICO), a laptop was stolen from a contractor that was working with the Newcastle Youth Offending Team.  The laptop was not protected with disk encryption software.

Contract in Place, No Follow Up

The theft took place in January of this year.  A laptop being used by a Newcastle Youth Offending Team contractor was stolen during a home burglary, leading to the breach of names, addresses, dates of birth, and the names of schools.  The contractor was working on a "youth inclusion program."

While there was a contract in place for the protection of data, Newcastle Youth Offending Team did not ensure that the agreement was being followed.  Due to the breach, Newcastle Youth Offending Team had to sign an Undertaking, promising to make sure that contractors and other data processors working on their behalf would ensure that laptops, mobile devices, and other portable machines will be protected with encryption software.

Third Party Compliance - How to Check Up

That contractors, business associates, and other third parties can cause an organization is not news.  It's happened more than often in the past; chances are that it will happen many times more in the future as well.

The ICO has faulted Newcastle Youth Offending Team for the lack of encryption, but realistically, how can the Youth Offending Team monitor what the contractor does?  It could ask for some kind of certification, I guess.  But then, they had a contract: are we to believe that one official document can be trusted over another?

Of course, there is a way around this: certain encryption suites, such as AlertBoot, feature a central management console that is accessible over the internet.  In fact, we've signed up customers based on the fact that they can just tote around a laptop and show potential customers that, yes, they do use full disk encryption to protect their laptops and other computers.

With such a tool at one's disposal, proving compliance would literally be a couple of clicks away.


Related Articles and Sites:
http://security.cbronline.com/news/ico-criticises-newcastle-youth-offending-team-over-dpa-failure-281011
http://www.ico.gov.uk/news/latest_news/2011/youth-offenders-details-lost-on-unencrypted-laptop-28102011.aspx
http://www.guardian.co.uk/government-computing-network/2011/oct/28/newcastle-youth-offending-team-data-breach-ico

 
<Previous Next>

Disk Encryption Software: Henry Ford Announces Third Breach, Infectious Diseases Computer Stolen

UK Data Protection Act - Encryption Basics

Comments

No Comments

About sang_lee

Sang Lee is a Senior Account Manager and Security Analyst with AlertBoot, Inc., the leading provider of managed endpoint security services, based in Las Vegas, NV. Mr. Lee helps with the deployment and ongoing support of the AlertBoot disk encryption managed service. Prior to working at AlertBoot, Mr. Lee served in the South Korean Navy. He holds both a B.S. and an M.S. from Tufts University in Medford, Massachusetts, U.S.A.