From data breach to information stewardship

This journal and the individual contributions contained in it are protected under copyright by Elsevier Ltd, and the following terms and conditions apply to their use: Photocopying Single photocopies of single articles may be made for personal use as allowed by national copyright laws. Permission of the publisher and payment of a fee is required for all other photocopying, including multiple or systematic copying, copying for advertising or promotional purposes, resale, and all forms of document delivery. Special rates are available for educational institutions that wish to make photocopies for non-profit educational classroom use. L oss and theft of information from organisations continues to be a significant problem. Why do these leaks still occur and what can be done to improve matters? People would not treat money with the same disregard that they treat information and data. Taking care to look after property that is not your own is called stewardship, and what is needed is better information stewardship, explains Mike Small, a member of the London Chapter of the ISACA Security Advisory Group. This journal and the individual contributions contained in it are protected under copyright by Elsevier Ltd, and the following terms and conditions apply to their use: Photocopying Single photocopies of single articles may be made for personal use as allowed by national copyright laws. Permission of the publisher and payment of a fee is required for all other photocopying, including multiple or systematic copying, copying for advertising or promotional purposes, resale, and all forms of document delivery. Special rates are available for educational institutions that wish to make photocopies for non-profit educational classroom use. NEWS Silk Road online drug market taken down 1 Mobile malware tops one million, but Google says problem exaggerated 2 FEATURES From data breach to information stewardship 5 Organisations need to start treating data the same way they treat money. People handle data that isn't theirs, so what's needed is a proper sense of stewardship, argues Mike Small, a member of the London Chapter of the ISACA Security Advisory Group. Deployment and management with next-generation firewalls 8 The Next-Generation Firewall (NGFW) delivers a great deal of additional capability over traditional devices. But with that comes extra deployment and management overhead. Sam Erdheim of AlgoSec describes an approach to sizing and deploying NGFWs in users' environments, and to managing firewall policies, to minimise complexity. Privilege management – the industry's best-kept secret 12 The …