Amidst the chaos of Brexit, many security minded organisations are concerned about the implications of the European Regulation on the Protection of Individuals with regard to the Processing of Personal Data, adopted in 2016 and planned to be enforceable in May 2018.

As an integral component of EU privacy and human rights law; it regulates the processing and distribution of personal data. In essence it will become illegal, or certainly contrary to the regulation, to link the stored data to the individual. Furthermore, the regulation states that personal data should not be processed unless the individual is informed and at least one of a set of strict criteria are met.

Whilst the regulations are designed to protect individual’s rights to privacy, they will have enormous implications for the security industry which now must adapt to comply.

Shaun Oakes, Managing Director of ievo Ltd, the Newcastle-based manufacturer of biometric recognition systems, explains, “The regulation is designed to prevent stored data being linked to individuals and used for purposes other than ensuring the security of whatever system it was designed for and transferring this data to third parties. Biometric data – fingerprint scans in our case – comes under the heading of a ‘special privacy element’ which are forbidden to use and process, unless, and this is very important, one of a number of criteria apply, the most pertinent of which is the data subject has given permission.”

“As all scans are taken either voluntarily (after the individual has given his or her permission) or legitimately to ensure the safety and security of others, the ievo range of biometric systems fully comply with this legislation as they utilise feature-based matching – they do not store the raw biometric data or image; but rather extract a salient set of features known as minutiae from which an individual template is generated.”

“In essence, we use a system of ‘pseudonymisation’ where the data is processed in a manner where it can no longer be attributed to an individual without the use of additional information which is stored separately and subject to strict technical and organisational control.”

“Following a High-Resolution scan of the finger our algorithms separate the foreground from the background of the image; it then enhances the image, detects minutiae points and creates a pattern. It is this pattern that is stored on our controller (which are installed separately from the sensor) which, when combined with encryption using AES (Advanced Encryption Standard) ciphers and further confidential safeguards serve to eliminate tampering. It is important to note that the original scanned image of a fingerprint is never stored.”

“As such, ievo biometric readers fully comply with the new legislation, but many older systems which store biometric and/or personal data of card holders, or those with knowledge of key pad combinations, may well have to review their compliance.”

The process of data extraction from a typical fingerprint scan creates an encrypted pattern, no fingerprint image is stored.

(120)

More than three-quarters (88%) of hackers can break through cybersecurity defences and into the systems they target within 12 hours, while 81% say they can identify and take valuable data within another 12 hours, even though the breach may not be discovered for hundreds of days, according to research by global technology company Nuix.

The Nuix Black Report—the results of a confidential survey of 70 professional hackers and penetration testers at DEFCON, the hacking and security conference—will overturn many conventional understandings and sacred cows of the cybersecurity industry.

“There is no shortage of cybersecurity industry reports so we’ve avoided going down the familiar path of compiling data about incidents that have already taken place or highlighting trends and patterns in data breaches—these are clearly the symptoms of a deeper problem,” said Chris Pogue, Nuix’s Chief Information Security Officer and a co-author of the Nuix Black Report. “Instead, we have focused on the source of the threat landscape: the attackers themselves.”

By examining the security landscape from the hacker’s perspective, the Nuix Black Report has revealed results that are contrary to the conventional understanding of cybersecurity. For example:

• Respondents said traditional countermeasures such as firewalls and antivirus almost never slowed them down but endpoint security technologies were more effective at stopping attacks
• More than half of respondents changed their methodologies with every target, severely limiting the effectiveness of security defenses based on known files and attacks
• Around one-third of attackers said their target organizations never detected their activities.

“Data breaches take an average of 250–300 days to detect—if they’re detected at all—but most attackers tell us they can break in and steal the target data within 24 hours,” said Pogue. “Organizations need to get much better at detecting and remediating breaches using a combination of people and technology.”

“The Nuix Black Report illuminates the true nexus between attacker methodology and defensive posture; showing which countermeasures will improve security and which are a waste of money and resources,” said Pogue. “Readers will learn what is the best spend for their security dollar and, more critically, why.”

(213)

Whether you are dealing with a sole proprietorship or a large-scale corporation, it is always important to secure your business assets. A security breach could not only cause the loss of critical information, but it can also damage your reputation. This is especially true if you share information with other organizations.

Unfortunately, security incidents have increased significantly over the last couple of decades, affecting over 70 percent of organizations in the U.S alone. This has subsequently led to an upsurge in the demand for effective security systems in the business world. The problem: there are gazillions of security systems in the market today that pinning down to a single one is a dilemma in itself. This brings us to our topic today: how to choose the appropriate security systems for your business.

Types of Business Security Systems To Consider

There are five main types of security systems which businesses should consider installing in their company building in order to secure not only the building, but the staff and customers too.

Fire Alarm Systems

Any business needs a system for detecting smoke and alerting occupants of a possible problem which involves fire and smoke. Fire alarm systems can go a long way towards preventing losses resulting from a fire outbreak in the premises which could harm staff, as well as customers.

CCTV Systems

CCTV systems allow you to monitor your business from both the outside and inside, as well as keep track of your customers and employees. If customers and employees are aware they they are being recorded on CCTV footage at all times, it could prevent them from being part of a deviant or criminal act.

Most importantly, cameras can help discourage criminals from entering the business premises or capture enough footage to prosecute intruders, giving anyone in the building a sense of protection when working.

Wireless Sensors

Your clients, staff, and customers are an important part of your organization too. One way you can keep them protected is by installing wireless sensors that can detect toxic gases like carbon monoxide.

Access Control Systems

The twenty first century has seen a significant development in technology in terms of security systems. One such advancement is access control systems, which help you to manage the access to and from your business. This in turn ensures the safety of both your assets and employees.

Remote Monitoring

Another brilliance of modern security technology is the ability to monitor your business remotely. Remote monitoring involves connecting security systems to intelligent alarm keypads that give you instant feedbacks when something happens at your business. A 24/7 monitoring station will even keep an eye on your business when you can’t.

Factors to consider when choosing a business security system

Who will monitor the cameras?

You have three options, depending on the nature of your company. The first option is to incorporate a security surveillance monitoring center in the premises. Factors that come into play here include the training and hiring of security personnel, additional installation expenses, and labor.

The second option is to hire a reputable business security company to monitor your establishment. The third option is to find a software solution that will give you access to your facility from any internet-enabled device. In any case, adding access controls that bar employees from accessing certain areas of your facility can go a long way towards enforcing the company’s security systems.

The Location

Surveillance cameras are only as effective as their positioning. Finding the right spots to install your CCTV systems can ensure optimal security both inside and outside the establishment. Even the most advanced camera setup can end being completely useless due to mistakes in positioning.

For this reason, it is advisable to enlist the help of a professional surveillance system firm during the installation and implementation process.

The Cost

It can be tempting to go for the most sophisticated security system in the market, but you still want to stick within your budget or it may end up ruining you financially. Consider whether you just want an alarm system that sounds off to scare intruders away, or need the alarm to transmit a signal to a monitoring system that will then alert you and local authorities in case of a break in. The latter comes with a monthly fee, but is still more effective.

Bottom Line

Finding the most appropriate security system for your business requires planning and critical evaluation. After a comprehensive security check, your quote should cover everything your business needs, including monitoring costs, servicing, installation, insurance, and key holding. Upon installation, have your supplier test the sensors thoroughly and train the authorized staff on how to use the security system.

(96)

Cyber attacks can happen to anyone and attackers can strike at any time. It can be challenging for small businesses to deal with cyber attacks as they lack the resources and appropriate security to keep themselves protected. Creating a business online can have its vulnerabilities and keeping your data protected is crucial for all businesses.

Premierline turned to some cyber security experts and their top three cybercrimes to look out for in 2017 were:

1. Ransomware
2. Internet of Things (IoT)
3. Spear-phishing

These will continue to grow especially the internet of things.

Ransomware

Ransomware is literally a software that holds the user at ransom by encrypting files on their device and delivering a ransom note asking for payment (usually a fairly low amount, via bitcoin) to unlock the files. Of course, paying the ransom does not guarantee the files will actually be unencrypted, however it can identify you as a target for future attacks and only encourages more proliferation of the crime.

Stephen Wright from Cyber Skills Centre added that “2017 will likely have greater sophistication and possibly move to also targeting households, individuals, and mobile devices.”

Internet of Things (IoT)

With greater connectivity, comes greater vulnerability. We will see more attacks targeted at the Internet of Things, including a shift from ransomware largely targeting computers and smart phones to targeting consumer products. We’ve already seen some examples of this, such as ransomware targeted at smart TVs but as

It’s been predicted that 96% of senior business leaders will be using IoT by 2020.

Spear-phishing

In 2015 / 2016 we saw a huge number of attacks carried out via spear-phishing emails. These emails look like they come from a legitimate source, for example a trusted institution, colleague or friend, they are tailored for the recipient and some appear very convincing and sophisticated.

According to Dr Jessica Barker, “spear-phishing emails will focus on so-called ‘CEO Fraud’ in which a member of the finance department receives an email that appears to come from the CEO requesting an immediate transfer of funds to a bank account.”

So how can you protect your small business from being under threat and what precautions should you take?

You can read all about it here: https://www.premierline.co.uk/knowledge-centre/cybercrime-in-2017.html

(514)

Ransomware – the newest and most insidious malware that wrests control of a device or data and demands payment for its return – is unfortunately on the rise. Though early studies initially predicted a drop in ransomware’s popularity in 2014 and 2015, 2016 brought an unexpected resurgence in the malware that had millions of individuals and businesses scrambling.

The likely reason behind ransomware’s renaissance is its infiltration of more devices: Macs, smartphones, and even IoT tech are being hit with ransomware attacks, giving cybercriminals more opportunities to make quick cash.

It is more important than ever that consumers protect themselves against ransomware – if not to safeguard their data and devices than to dissuade malicious hackers from further galvanizing the dangerous technique. The following six tricks should keep any device safer from the risks of ransomware.

1. Backup Often

Ransomware isn’t the only threat to data; users could lose everything on their devices’ hard drives in the time it takes to upend a beverage or trip over a crack in the sidewalk. However, ransomware is perhaps a more compelling reason to back up data often and to several sources.

Experts advise computer users to use at least two backups: one based in the cloud and one on a physical external hard drive. The former is more convenient but also more susceptible to attack – especially since hackers have begun developing cloud-specific malware in recent years – so having multiple backups is ideal.

2. Update Often

Operating system and software updates are inconvenient, but opting out of updating puts devices at serious risk. Every update comes with security patches and improvements that work to keep devices safe from emerging threats, which means outdated versions are more susceptible to infiltration by ransomware or other malware.

Whenever users see an available update, they should take a break and allow the update to download and install, or else ransomware could creep in through vulnerable software.

3. Limit Your Privileges

There are several different types of ransomware, but the most common take control of a device through the current user’s account. Unfortunately, most users use the default account, which often has administrator privileges the ransomware abuses to its advantage. However, it is easy enough to thwart ransomware’s use of admin abilities: Don’t use admin accounts. The process for creating a new local account is surprisingly quick and easy, though the precise steps depend on whether a user has a Mac or a Windows PC.

4. Control Your Activity

Ransomware tends to infiltrate devices with the same tactics as other malware: primarily through spam emails, corrupted software files, and hacked webpages. Thus, to stay safe from ransomware, users must be exceedingly careful concerning their use of their devices. Here are some smart rules for device activity:

• Check the file extension before clicking. Ransomware (and other malware) often hides as one type of file, like an image, when it is really an executable file. Any .exe. downloads should be from trustworthy sources and users should never use Autoplay to launch files.
• Never use unfamiliar USB drives. Malware can spread through physical connections, too.
• Avoid opening email from unknown senders. Even if the subject is something eye-catching or important-seeming, users should be wary of unfamiliar emails.
• Avoid clicking links or downloading files in suspicious emails or on suspicious websites.
• Turn off Bluetooth and wireless connections unless in use.
• Disconnect devices from local networks unless in use.

5. Use Anti-Ransomware Tools

In addition to controlling their data and behavior, users should rely on proven anti-ransomware tools to keep them safe. Paid consumer ransomware protection is the most reliable security software; though it does come with costs, unlike some free security software available online, it is backed by guarantees and the experience of thousands of security professionals who have devoted their lives to keeping users and devices safe. Online freeware could very well be laced with the same ransomware it promises to guard against.

Additionally, users should ascertain that their operating system’s firewall is active. Though it may seem like an old-fashioned security measure, a firewall is simply one more layer of protection that ransomware must overcome to infect a device, which makes firewalls advantageous in the fight against malware.

6. Respond Appropriately During Attack

Considering the complexity and aggressiveness modern hackers employ, it isn’t inconceivable that users will still succumb to a ransomware attack even with stringent security measures in place. The damage done to data and a device during a ransomware attack will depend on the type of ransomware; though some users will never recover what they lost, others may be able to resume business as usual with the following response plan:

• Contact security professionals. Users who have anti-malware protection may have access to a hotline where professionals can lend expert advice.
• Use a post-ransomware tool. This fast-acting, targeted anti-virus software identifies the file harming the device and erases all traces of it, reversing any changes made to the device and hopefully restoring missing data.
• Run additional anti-malware checks. Malware often leads to other malware, so users should scour their device for additional issues that might threaten their data.

Even if a security professional and specialized software cannot reinstate lost information, users should never be tempted to paying a hacker’s ransom. For one, there is no guarantee that paying the sum will return the data; for another, giving cybercriminals what they want only encourages them and those like them to continue perpetrating illegal acts.

(502)

TB Forum powered by Intersec 2017 has been a smashing success gathering together manufacturers, developers, solution providers, sales channels, end users, regulators and government officials under one roof.

Exposition of solutions and technologies for Retail, Banks and Finance, Oil&Gas, Industries, Energy, Transport, Sport and Mass Events, City Management, Government, etc., as so as special meetings and business events has attracted top management and high-level specialists from Russia and rest of the world!

Delegations from 39 countries have visited us these days:

United Kingdom, Palestine, Spain, Italy, China, Germany, Lithuania, Sierra Leone, the United Arab Emirates, Zimbabwe, India, the Republic of Lebanon, Greece, Netherlands, Portugal, Myanmar, Iran, Iraq, Morocco, Japan, Colombia, Sri Lanka, Turkey, Czech Republic, Republic of Chad, Brazil, Dakar, Republic of the Congo, Cyprus, Armenia, Azerbaijan, Belarus, Kazakhstan, Kyrgyzstan, Moldova, Tajikistan, Ukraine, Uzbekistan, Turkmenistan.

Conference sessions have been extremely popular these three days! An outstanding line-up of experts addressed the industry’s hottest challenges and topics. The program featured various talks, round tables, plenary sessions, workshops and seminars in four different conference rooms.

An active part of the Organizing Committee in set-up of the business program and the exposure helped to focus the most important issues for the safety of citizens, businesses, territories, facilities and infrastructures.

Led by high-profile speakers and supported by Federation Council Committee on Defense and Security, Moscow Government, Ministry of Transport, Anti-Terrorist Centre of CIS, Association of Russian Banks and other associations, big buyers and regulators – the TB Forum 2017 conferences were an ideal platform for experts to discuss and analyze new developments, trends, legislation changes within the national security industry.

Once again TB Forum provided to its visitors and participants direct access to the major clients and key players of the market.

DOWNLOAD POST SHOW REPORT>>>

This year’s Show has been more to see, more to do and even more to learn! Join us and other like-minded industry professionals in Moscow at TB Forum powered by Intersec 2018! Click now for your early bird special!

EARLY BIRD SPECIAL>>>

Anna Zabora

TB Forum powered by Intersec
Project Coordinator

Groteck Business Media

Find me on LinkedIn

zabora@groteck.ru
www.groteck.com

(94)

(111)

TV maker Vizio has agreed to pay out $2.2m in order to settle allegations it unlawfully collected viewing data on its customers. The US Federal Trade Commission said the company’s smart TV technology had captured data on what was being viewed on screen and transmitted it to the firm’s servers.

http://www.bbc.co.uk/news/technology-38889975

Following this news, Lee Munson, security researcher at Comparitech.com, comments:

“The news about Vizio collecting data about its customers’ viewing habits is significant for many reasons, not least of which is the awareness it has created around the topic of snooping smart devices in the home.

“While customers of Vizio, and possibly many other manufacturers of connected devices, would do well to assume that the gadgets in their homes are collecting information about them, they do not have to accept it.

“Depending upon jurisdiction, privacy laws may well outlaw the practice, or control what can be done with that data.

“Even if that is not the case, many smart devices offer customers the ability to turn off the in-built tracking services, albeit those options may be buried in places where they are unlikely to be found with ease.

“Customers also have the option to research products before they buy and this is another reminder that privacy policies are there to be read, however long they may be!

“Only the fully informed will truly understand that such practices are likely to continue in this day and age, in which personal information is the most lucrative currency bar none, whether its collected with consent or stolen from a third party’s site during a data breach.”

(86)

In the age of constantly advancing technology, shouldn’t the security of this technology be advanced as well? This is exactly what is to be discussed at the 2^nd GCC OT Security Forum. The main focus is to illuminate and up-skill delegates on effectively securing OT infrastructure through different courses of action such as convergence of IT and OT, defeating cyber threats, changing the regulatory landscape, understanding smart cities, etc. It is the perfect opportunity to showcase any new upcoming technology as well as new security services. Speakers can address various individuals from various fields who are facing the issues.  It is not only a platform to discuss and solve problems, but it is also the perfect way of networking amongst like-minded individuals. For this and more, this forum is a must to partake in.

This event takes place 21-23 March 2017 in Doha. Visit  http://www.otsecurityforum.com

(85)