Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

The US Government Wants to Secure Your Data. Well, Sort Of.

Posted September 14, 2011    Mike Puterbaugh

Earlier today, George Hulme reported on a recently-introduced piece of legislation, the Personal Data Protection and Breach Accountability Act of 2011 (or PDPBAA for short, which sounds like how my last is pronounced sometimes), geared toward protecting customer data from theft or loss. Senator Richard Blumenthal (D-CT) hopes that this new bill will “prevent and deter data breaches that put people at risk of identity theft and other serious harm both by helping protect consumers’ data before breaches occur”. That sounds good; I think we’d all like that. But as with any type of legislation, the devil is in the details.For example, the proposed bill is targeted towards customers with 10,000 customers or more. Are we customers of Twitter? I’m pretty sure I’m the product they’re selling, not their customer. What constitutes me being a “customer” of a company? I think I have flown once on Frontier Airlines, 3 years ago, but they undoubtedly have my information somewhere. Would that count?

“Data” is a pretty broad term as well.  Credit card numbers, social security numbers, birth dates, even Facebook photos?

(I’m sure there are most details in the bill that bear scrutiny, I was only able to make it through the first 30 pages.)

This isn’t the first, nor will it be the last time that regulations have been proposed to protect end users and their personal data. What I hope most typical consumers realize is, however, most of the companies that they trust with their personal information have extremely sophisticated security measures in place, including comprehensive vulnerability management programs to not only protect your data, but theirs as well.

At the end of the day, if the possibility of losing customers and their brand isn’t a strong enough call to action for your favorite companies to protect your data, then perhaps Senator Blumenthal’s bill and its penalties might be. But I doubt it.

You can check out Hulme’s solid reporting here, at CSO Online.

If you’re not following Hulme on Twitter, you should be, he provides great coverage on the security industry and is also known to share his stock picks from time time.  You can follow me on Twitter here.

Leave a Reply

Additional articles


Retina CS Vulnerability Management Solution Gets Primetime Award for Innovation

Posted October 12, 2015    Sandi Green

Analyst firm Frost & Sullivan presented BeyondTrust with the 2015 award for ‘Best Practices in Enabling Technology Leadership in the Vulnerability Management Industry.

, ,

Answering the age-old question, ‘What’s plugged into my network?’

Posted October 9, 2015    Alejandro DaCosta

“What’s plugged into my network?” is a question I hear frequently from security administrators. And, really, it’s no surprise why. No longer do we have to account just for the physical servers in our datacenters, workstations and a few network devices. Now we need to keep track of roaming laptops, dynamic virtual systems, off-site cloud deployments and BYOD.


Closing the Vulnerability Gap

Posted October 7, 2015    Brian Chappell

Managing vulnerabilities is a significant challenge for many organizations. The main difficulties with managing this manifest in two key areas. The first is that the list isn’t static. The second is priority.