Net firms reject monitoring role
7975
Net providers in the UK are resisting calls for them to police what customers do online.
369298
RWerp writes &quot;LWN.net reports that Debian, a Linux distribution known for its commitment to Free Software ideas, rejected Microsoft-patented SenderID technology, intended to combat spam.
18518
A US congress panel backs legislation which would stop internet firms from co-operating with Chinese authorities.
252591
Â· Editor says proprietor dismayed at coverage Â· Mogul 'does not influence day-to-day decisions'
625345
Google has been sharply criticised in a report looking at the privacy policies of popular net firms.
742434
In contrast to AT&T, company says it's not interested in installing filters on its network or inspecting packets for possible piracy, citing concerns about customer privacy.
49394
Poor watch lists and a centralized architecture are still issues.
22937
BPI: You don't have to show us any stinkin' personal data Analysis Internet users in the UK can safely ignore this week's EU Courts of Justice ruling on data protection for filesharing: it's already irrelevant.â¦
77577
ISP rejects Microsoft antispam plan amid concerns from open-source community.
347403
No sense pointing the finger at Hewlett-Packard anymore; we have Congress and the FBI to do that. But I did want to discuss the âI didnât know what my employees/vendors/executive staff were doingâ defense -- which was, of course, made famous by Enron , so you have to know it just wonât do. Instead of looking backward, I spoke with a couple of experts on governance, privacy, risk, and compliance assessment about how companies can do the right thing in the future.
539332
An ICANN working group couldn't agree on proposals to limit public access to data about Web site owners, which was a relief to companies that use the WHOIS database to track phishers and other online miscreants.
77750
U.S. regulators said Microsoft Corp.  does not have to include in its proxy a shareholder proposal demanding that the software maker justify its support for Net neutrality, according to a decision made public on Tuesday.
583685
Science & environment: Technology group criticised after forcing a website which reported on the firm's activities to close down
762213
California Gov. Arnold Schwarzenegger vetoed on Wednesday a bill that would have required the state's employers to give workers written notification if e-mail and other Internet activity is being monitored at work.
669159
Opinion Analyst firm takes issue with IBM claims
392495
U.S. regulators said Microsoft Corp.   does not have to include in its proxy a shareholder  proposal demanding that the software maker justify its support  for Net neutrality, according to a decision made public on  Tuesday.
388261
(InfoWorld) - An overwhelming percentage of businesses still fall far short in their efforts to comply with industry data-handling regulations and reduce their likelihood of experiencing a serious leakage incident, according to a new survey. In a report to be published by the IT Policy Compliance Group on July 18, the consortium of IT compliance and security experts concludes that some 90 percent of all businesses still do not have sufficient policies in place to meet data governance regulations and adequately limit the risk of a breach. In the survey of 475 companies, a third of whom reported revenues of more than $1 billion last year, the industry group found that an overwhelming majority of the firms expect to deal with at least six business disruptions related to major data incidents per year along with five or more instances of information loss or theft. While businesses continue to invest policy enforcement software, and other technologies aimed at helping them meet data-handling regulations, said James Hurley, managing director of IT Policy Compliance Group, most are still struggling to fill all the gaps left in their systems that leave them open to potential incidents. Hurley is also a senior research manager at security software maker Symantec, a member of the compliance policy think tank, along with such organizations as the Computer Security Institute, Institute of Internal Auditors, ISACA, and IT Governance Institute. Along with well-known federal guidelines, such as the Sarbanes-Oxley Act, many companies are having trouble responding to new statewide data protection measures crafted after the California 1386 bill, which requires businesses to make public notice of severe data incidents, he said. "When it comes to protecting data, a lot of organizations still find information all over the place that they may not even have control over," Hurley said. "People are finally discovering this is a difficult problem and that the controls they thought they have in place may not be adequate; that they need to rethink those controls and find out where the data inventory actually is because in most organizations, it's not under control." In addition to gauging what percentage of companies remain at risk for a data breach, the survey also attempted to measure the impact of such an event on the average company. Based on its respondents' replies, businesses that are forced to report major incidents publicly can expect to experience an 8 percent loss of their stock price and an equal 8 percent of their customers. Companies can also expect to report an 8 percent falloff in their quarterly revenue along with additional costs for litigation, customer notification, and subsequent settlements averaging $100 per each record they lose. In a nod to the increased challenge of meeting regulations and lowering data leakage within enterprises, the report concludes that larger companies are more likely to have incidents, based on its research. Organizations with less than 1,000 workers average roughly 8 percent in revenue and customer losses per event, whereas companies with more than 100,000 employees can expect to lose 12 percent of their sales and clientele. While some researchers have tried previously to divine the overall expense of having a major data breach, such as the one reported by retailer TJX Companies in early 2007, it has been hard to guess just how much such an event truly costs said Mike Money, associate director at Protiviti, an auditing services specialist that is also participating in the consortium. "We finally have some data on this because of the state laws that have gone into effect, so hopefully some companies see this report and understand the extent of the problem," Money said. "People are finally starting to focus on the issue because they see the newspaper headlines every day, and until you've been through one of these types of events, it's hard to understand all the implications." Unsurprisingly, the report also finds that companies that allocate the highest budgets for compliance automation technologies are faring better in their efforts than those who spend less on the issue. In a shift from previous studies completed by IT Policy Compliance Group, however, it appears that most organizations are realizing they need to adjust their budgets to account for the tools, Hurley said. "The difference is that these state regulations have put this on the front of the radar screen, and they are realizing that they need to spend money to solve security problems that benefit compliance goals," said Hurley. "There's a clear linkage between having better controls and experiencing fewer data losses and business disruptions, as obvious as that may seem."