Are companies disclosing security breaches to its clients?
Sep 28th, 2008 | By Opal Tribble | Category: Lead article
Imagine for a moment that you’ve been doing business with a company for a while. You trust them, enjoy their service, you might even have recommended them to your friends. The company goes out of its way to look afters its customers, or so it may seem.
Image and Date Manager recently reported that a recent survey conducted by Logica with 300 international public and private sector organizations and the reports revealed some startling findings. According to the survey 60% of the businesses failed to report security breaches to their clients. Say what? I would think companies would want to report this to employees. No, it’s not great news but the customer has the right to know when these types of issues occur. Recently, Apple had to email its MobileMe subscriber when some emails were lost. Definitely not news customers want to hear however they did inform them about the issue.
Perhaps one of the reasons this is happening is because of employees aren’t aware of how to effectively secure management data. I used to work at a company where one of my many roles was educating employees how to securely manage data. They also received instruction in how to prevent security breaches. The report also went on to state that only 30% of organizations educate the staff in IT security. Additionally upsetting was to learn the number of companies that weren’t adhering to the security procedures when storing personal data. According to the survey only a quarter complied with ISO27001/2. Customers have a right to know if their data has been breached.
With all the security breaches that have affected big organizations like Google (security breach with its email) you would think that companies would be more vigilant in ensuring the same thing doesn’t happen to their companies.
Related: