http://www.securitycatalyst.com/blog/2007/05/note-to-universities-web-sites-providing-a-security-breach-playground/ changing the way people protect information Thu, 04 Dec 2008 02:21:27 +0000 http://wordpress.org/?v=2.6.3 http://www.securitycatalyst.com/blog/2007/05/note-to-universities-web-sites-providing-a-security-breach-playground/#comment-1855 Security Catalyst » Blog Archive » Breach vs. Incident: Semantics or Something More? Wed, 11 Jul 2007 07:24:27 +0000 http://www.securitycatalyst.com/?p=332#comment-1855 [...] at the very least, just as dangerous as “breaches” by external attackers. I have written a few times about the insider threat faced by organizations. Studies have continued to prove that internal [...] [...] at the very least, just as dangerous as “breaches” by external attackers. I have written a few times about the insider threat faced by organizations. Studies have continued to prove that internal [...]

]]> http://www.securitycatalyst.com/blog/2007/05/note-to-universities-web-sites-providing-a-security-breach-playground/#comment-1817 www.andrewhay.ca » Suggested Blog Reading - Wednesday May 9th, 2007 Wed, 09 May 2007 15:46:28 +0000 http://www.securitycatalyst.com/?p=332#comment-1817 [...] Note to Universities: Web Sites Providing A Security Breach Playground - Remember when Universities were only breeding grounds for STD’s? While I was compiling the Educational Security Incidents (ESI) Year in Review – 2006, I noticed something interesting. Of the 83 information security incidents in 2006 reported by colleges and universities, 20 such incidents were due to Unauthorized Disclosure. Unauthorized Disclosure on ESI is defined as incidents involving the release of information to unknown and/or unauthorized individuals. In other words, Unauthorized Disclosure tends to involve employee or organizational mistakes at some level. [...] [...] Note to Universities: Web Sites Providing A Security Breach Playground - Remember when Universities were only breeding grounds for STD’s? While I was compiling the Educational Security Incidents (ESI) Year in Review – 2006, I noticed something interesting. Of the 83 information security incidents in 2006 reported by colleges and universities, 20 such incidents were due to Unauthorized Disclosure. Unauthorized Disclosure on ESI is defined as incidents involving the release of information to unknown and/or unauthorized individuals. In other words, Unauthorized Disclosure tends to involve employee or organizational mistakes at some level. [...]

]]>