Meeting Stricter Security Rules
Written by Bob Scott   
Wednesday, 03 November 2010 01:46

Deli.cio.us    Digg    reddit    Facebook    StumbleUpon    Newsvine

Trey JamesThe best protection for data at your firm might be a door, a lock and a process for keeping unauthorized people away from the server room. Because with the potential stricter requirements regarding personal data looming across the country, physical security stills remains the No. 1 issue, not viruses and spyware.

"It’s so easy to walk and steal a server. You have to be more technical to break in electronically," says Trey James, CEO of Xcentric, an Alpharetta, Ga.-based company that provides outsourced technology services to CPA firms.

There are lots of numbers to back up that statement. The Microsoft Security Survey for January through June showed 30.5 percent of all incidents it handled involved equipment theft, by far the largest category of threats to data. Information about breaches compiled by the Open Security Foundation's DataLossDB showed similar results. The disposal, theft or loss of equipment, media and paper documents represented 43 percent of all reported incidents. By itself, theft of all types accounted for 31 percent with stolen laptops the largest category at 19 percent of the total.

That lines up nicely with Microsoft's conclusion that malware incidents - hacking, malware itself and fraud - represent less the half the total of the categories that designate negligence - lost, stolen or missing equipment; accidental disclosure; or improper disposal.

At events, such as last week's user conference for tax and accounting firms held by Thomson Reuters, James has been telling attendees that physical security may require some expensive changes.He says many observers expect Massachusetts regulation 201 CMR 17.00, which went into effect in March, is likely to become a template for other state rules that govern businesses that keep personal information about customers on their computer systems and on paper.

That's where doors come in because of the requirements for physical security the regulation imposes on business.

The Massachusetts approach "requires the server room be locked," James notes. Since many businesses don't have server rooms, they will need them. Once there's a door to shut, the businesses then often need air conditioning systems to keep equipment cool. Firms also cannot allow non-IT personnel, for example the cleaning staff, into the server room unsupervised he noted, and would probably need to keep a visitor log. The regulations also affect paper records and because many firms built open file areas, "It requires a lot of the small firms to buy a door," he says.

Businesses must develop a security plan, which must be filed annually with the state of Massachusetts. They must also show that employees receive two hours of training per year. And the provisions don't just impact companies that have a physical presence in Massachusetts, it affects companies that have personal data about customers in Massachusetts.

In many ways, James says the requirements are so strict and detailed that they may be impossible to adhere to.


Bob Scott
About the author:
Bob Scott has provided information to the tax and accounting community since 1991, first as technology editor of Accounting Today, and from 1997 through 2009 as editor of its sister publication, Accounting Technology. He is known throughout the industry for his depth of knowledge and for his high journalistic standards.  
Read More >>
Last Updated on Wednesday, 03 November 2010 12:58
 

Add your comment

Your name:
Your email:
Subject:
Comment:
  The word for verification. Lowercase letters only with no spaces.
Word verification:
Comments (1)
New security requirements
1 Wednesday, 03 November 2010 18:04
Frank Stitely
The biggest danger to security is employees or soon to be ex-employees. The people you don't trust don't steal from you. It is the people you trust.

Thomson Intros New Workpaper Product

News image

Thomson Reuters has introduced a new workpaper product, Workpaper CS. And while the company will continue to maintain its Engagement CS product, that product will not get much further development.

News | The Progressive Accountant | Tuesday, 22 May 2012

Intuit's Smith: Good Tax Season; But..

News image

  Intuit had an 11 percent increase in consumer tax revenue and the first growth in units sold to tax preparation professionals in three years for its third quarter ended April 30. But CEO Brad Smith thought the company should have done better in both areas in what he called a solid performance..  

News | Bob Scott | Friday, 18 May 2012

Wave Accounting Gets $12 Million

News image

Wave Accounting has secured $12 million in funding for its efforts to develop the market for its online accounting applications. Based in Toronto, Wave said the funding round was led by The Social+Capital Partnership with participation from existing investors Charles River Ventures and OMERS Venture.

News | The Progressive Accountant | Thursday, 17 May 2012

NetSuite Signs GT, Deloitte, Frank Rimerman

NetSuite is making strong inroads into the accounting community. At its SuiteWorld conference, underway this week in San Francisco, it announced three accounting firms and Sage's largest reseller as new additions to its channel.

News | Bob Scott | Tuesday, 15 May 2012

A Cloudy Year for Accounting Software

The technology press likes to declare something a "Year of ..." whatever the hottest trend is. But evidence is building that 2012 is going to be a big year for the sale of accounting applications that run on the web. Now, as is usually the case, there are usually a few big years once a new technology catches on.

News | The Progressive Accountant | Tuesday, 15 May 2012

SmartPros Results Flat

News image

Continuing education provider Smart Pros turned in results for its first quarter ended March 31 that showed both revenue and its net loss virtually unchanged from results in 2011. The company said lingering results from the recession and competitive factors kept a lid of its business.

News | The Progressive Accountant | Tuesday, 15 May 2012

TaxAct Revs Up 9 Percent

News image

TaxAct, the tax preparation software company purchased by InfoSpace, had pro forma revenue of $61.9 million a 9-percent increase from $56.8 million for the first quarter ended March 31. TaxAct, purchased on January 31 contributed only two months of actual results to its Bellevue, Wash.-based parent.

News | The Progressive Accountant | Thursday, 10 May 2012

Sage and Avalara Ally for Accountants Network

News image

Sales-and-use tax vendor Avalara is joining with Sage North America to provide resources to members of the Sage Accountants Network. Avalara's Accountants Resource Center provides tools and educational resources for helping them increase their sales tax knowledge.  

News | The Progressive Accountant | Tuesday, 8 May 2012

CliftonLarsonAllen to Resell Avectra

News image

CliftonLarsonAllen has agreed to resell Avectra's Social CRM to associations and nonprofit organizations.The accounting firm will offer the Avectra product in combination with Intacct's online accounting software. It is the latest move in the expansion of McLean, Va.-based Avectra's reseller program.

News | The Progressive Accountant | Thursday, 3 May 2012

ADP Revenue and Net Up 7 Percent for 2012

News image

Automatic Data Processing rolled sevens for its fiscal 2012 as net income, and revenue for employer services and total revenue all increased by 7 percent over 2011. And the company's metrics were strong in almost all areas for the year just ended.

News | The Progressive Accountant | Thursday, 3 May 2012

More in: News