Saturday | 30 August, 2008
CIO
Leakage Problem Means Cards Will Never Be Secure
Sue Bushell 26 September, 2006 12:26:50

Related Features
  • +

    Your World. . . Hacked 02 October, 2007 10:51:23

    As your business becomes more collaborative and global, the risks to your company’s trade secrets rise proportionally. Fortunately, there are new strategies to protect the data that allows you to compete
    The call to Bob Bailey, an IT executive with a major US government contractor, came on an otherwise ordinary day in October 2003. "Why are you attacking us?" demanded the caller, an IT leader with a Silicon Valley manufacturer. He wanted to know why Bailey's company had launched a denial-of-service attack against his network
  • +

    Ticked Off at Tick the Box Mentality 04 February, 2008 13:01:15

    Does your executive search firm know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
    Does your executive search firm know its MIS managers from its elbow? Does it even know the difference between an MIS manager and a CIO, and if it does, can it explain that difference to its corporate clients?
  • +

    9 Paths to Higher Performance 10 December, 2007 14:09:23

    When an organization brings together talented people in a creative, collaborative environment it fosters a culture of high performance, which in turn leads to superior business results
    Like high-achieving individuals, some organizations seem to have the Midas touch. Virtually every initiative they touch earns them gold and even those that fail never seem to cost them much of anything at all
  • +

    Pressure Points 03 September, 2007 13:56:39

    While CIOs all have different ways of tackling pressure, they all point to its single source: everywhere
    CIOs juggle tighter and tighter budgets, longer and longer to-do lists and rapid-fire technology updates that can shift the entire IT landscape overnight. They have to manage the expectations of tech savvy employees who want at work what they cobble together for themselves on the cheap at home; they have to find and retain IT staff and manage their Gen X/Y expectations while engaging intimately with the business; and they have to support 24x7 service demands
Related Stories
  • +

    Five data leak nightmares 08 January, 2008 10:20:34

    When Home Depot lost a laptop containing personal information on 10000 employees, it was just the latest in a string of high-profile data-leak incidents.
    Data breaches cost companies an average of US$197 per record in 2007, according to a study by the Ponemon Institute. The average cost of a data breach was US$6.3 million, up from US$4.8 million in 2006.
Additional Resources
Executive Guides
Whitepapers

Newsletter Subscription

Sign up for our CIO newsletters!
Weekly coverage of the issues that impact corporate and government information
RSS Feeds

A fierce and prominent opponent of the Hawke government's 1987 plans to introduce a national identity card says nothing has changed technologically in the intervening years that would make a smart card today any more secure than the Australia Card proposed then.

Yet Benbow Consulting Director Gary Benbow says governments are turning a deaf ear to warnings the data leakage problem makes it impossible to ever completely secure any smart card.

His comments came in the wake of revelations that 585 Centrelink staff had been sanctioned for privacy violations, while another 19 had been dismissed and 92 had resigned over a two-year period. Earlier in the year it was revealed that the Child Support Agency had discovered 405 breaches of privacy, including 69 cases where sensitive information had been given to former spouses.

Despite the security lapses, the Howard government wants to issue a smart card to up to 17 million Australians in phases from 2008 to replace 17 health and social security cards, including the Medicare and Veteran's cards. The government argues this will allow better service delivery to customers. It insists the card will not compromise privacy because databases will remain "siloed" and because citizens will be safeguarded by the newly established Access Card Consumer and Privacy Taskforce, chaired by former Australian Consumer and Competition Commission head Professor Allan Fels.

Plans for the card were announced by Prime Minister John Howard in July last year in the wake of the London bombings. The PM, a vehement opponent of the proposed Australia Card, argues much has changed since the Hawke government's proposal to introduce the Australia Card bitterly divided the nation in the mid-1980s. Benbow disagrees.

"I think the smart card (proposal) is atrocious," he says. "I was a vocal advocate against the Australia Card, and I still am. There's nothing that's changed because linking data makes data more accessible. I think what we've seen during the Centrelink debacle, where people trolled through files, is that anywhere that you can get to everybody's history through a unique identifier, where the infrastructure is not there to support privacy, is a problem.

"And we still have lots of areas for leakage of data in corporations. It doesn't have to be online either. It can be in a development environment, it can be data that is copied and sent into an off-site location, it can be the hard copy, it can be through wireless. There's a whole stack of ways that data can be leaked out of a server with or without knowledge. It is just horrendous to think that we are going about linking everyone's known data."

Benbow, with a strong background in IT audit, insists there is no truly secure computer environment and probably never will be. For instance he says he has just completed an audit of a major government and found security there to be "okay". But he says he faced strong pressure to give the go-ahead to the department's plans to link "very, very sensitive high-level confidential information" across the whole of government.

Yet he says even the computer systems of the world's best intelligence agencies, like MI5, the CIA and the KGB, suffer data leakage, usually emanating from "a person with two legs and two arms" and the motivation to compromise the data.

"Whenever you have a person involved you cannot give a 100 percent guarantee," he says.

Market Place
 

2008 CIO Summit

19th August, 2008 Four Seasons Hotel, Sydney Developed in partnership with CIO Magazine, IDC, INTEP and the CIO Executive Council.

The world of the CIO is extremely complex and diverse. Multiple priorities demand attention and decisions are needed instantly. Individual teams need to be driven towards common goals, and businesses strive to become more mobile, agile and responsive. For CIOs, the challenge never ends.

Every year the CIO Summit identifies what is top of mind for CIOs across Australia and New Zealand, and offers insight for CIO benchmarking and vendor strategic planning alike.

Recent IDC research shows that over 59% of CIO's believe that 'to achieve their business strategies, technology should be used more aggressively than today.'

Join us on August 19th to discover how this is possible with the latest technologies including Virtualisation, Web 2.0, IP Surveillance and Software as a Service (Saas).

Click here for registration.

Click here for more information.

Please email Denyse_Robertson@idg.com.au for further information.

  • +

    CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00

    Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00

    Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05

    Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    Best Western forced to play defense on data breach disclosure 29 August, 2008 08:08:00

    Could hotel chain have done a better job of defusing story about system intrusion?
    The headline in this week's Glasgow Sunday Herald -- "Revealed: 8 million victims in the world's biggest cyber heist" -- was a grabber.
  • +

    US Terror threat system crippled by technical flaws 28 August, 2008 09:53:00

    US Congress charges that US$500m project to prevent another 9/11 is a complete failure.
    A US House subcommittee is charging that a US$500 million IT project intended to "connect the dots" on terrorists and help prevent another 9/11 is a failure; it can't even handle basic Boolean search terms, such as "and, or and not."
  • +

    Malware infects space station laptops 28 August, 2008 08:15:00

    Not the first time, says NASA; astronauts load up Norton AntiVirus
    Malware has managed to get off the planet and onto the International Space Station, NASA confirmed yesterday. And it's not the first time that a worm or virus has stowed away on a trip into orbit.
  • +

    Separation of duties and IT security 28 August, 2008 09:40:00

    Muddied responsibilities create unwanted risk. Kevin Coleman says auditors may start labeling poorly defined IT duties as a material deficiency.
    Separation of duties is a key concept of internal controls and is the most difficult and sometimes the most costly one to achieve. This objective is achieved by disseminating the tasks and associated privileges for a specific security process among multiple people.
  • +

    How to recruit and retain the best young security employees 27 August, 2008 08:32:00

    Today's youngest generation of workers, known as Generation Y, have different career goals than their parents did. What do you need to know to get them to work for you?
    The final installment in a series of articles about generational differences and security. Part one looked at managing workers in different age groups. Part two examined the types of security concerns that are most commonly associated with different generations in the general workforce. This article provides recruiting and retention advice for security employees.
CIO Webcast Innovation #8 - What are the biggest roadblocks to IT's involvement in innovation at your company?
Watch the latest latest edition of CIO Innovation which is now available for download.
Watch the webcast
Sign up to the CIO Innovation update email


CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper

Optimized Back-up and Recovery for VMWare for VMWare Infrastructure with EMC Avamar

Virtual machines deployed in the data centre must be protected against failure. Read on to find out how to extend data protection to your virtual machines.

Sponsored Links