Chronology of Data Breaches
- Privacy Rights Clearinghouse - Data breach trends. Note that many more incidents are likely going unreported, possibly
because some states don't have breach notification laws. Those that are reported might be due to notification laws and an
effort to reduce liability (perhaps some incidents are reported because of an ethical sense of social responsibility).
Technology trend information supports risk management in the following ways:
Assessment & planning - provides information about trends that can impact regulations and enforcement, or affect customer expectations and actions.
This information can be used to generate more balanced goals.
Goal Implementation - with appropriate management attention and training, improves practices and employee performance with respect to security;
for example, which companies have managed a breach well and retained or even attracted new customers as a result?
Bowling Green State University incorporates the
ISO/IEC 17799:2005
Code of Practice for Information Security Management. References to ISO section numbers facilitate Plan organization and assessment.