Archive for the ‘UK’ Category

Lord of the Files – File Sharing Gone Wild

Monday, June 27th, 2011

Who would have thought that the novel, Lord of the Flies, by William Golding, an English literature staple for English schoolchildren, was not only the idea behind the popular TV series “Lost”, but also provides important parallels to the story currently unfolding of enterprise file sharing gone wild.  In the Lord of the Flies the attempts by the group of British schoolboys to govern themselves when stranded on a deserted island is in some ways akin to how business users are today attempting to govern their file sharing when deserted by IT.

The major themes of the Lord of the Flies include an exploration of the conflicts of civilization and the loss of innocence, both of which seem applicable to the current conflict of business user vs. IT in the world of enterprise file sharing.  While the novel, and even the TV show, may be rather more graphic on the conflict of living by rules vs. savagery, valuing the good of the group vs. individual gratification and exploring law vs. anarchy perhaps some good lessons can be learned?  Just how would Ralph, Jack, Simon and Piggy, the main characters in Lord of the Flies have handled file sharing?

Ralph, the elected leader of the group, the representative of order, civilization and productivity, thinks about how the boys should organize themselves and get to work to maximize their chance of survival and rescue.  Is Ralph perhaps the CIO figure?  Would Ralph, the CIO, be taking charge, implementing an enterprise file sharing solution so business users can not only survive and can get their jobs done, but also stay out of trouble.

Jack, the opposite of Ralph, the character representing savagery not civilization, demonstrates how he can use his savagery to control the boys who increasingly abandon civilization to follow him.  Hmmmm… not sure about this Jack character, although we have all seen business users do things they shouldn’t.

Simon, is the character who just does what is right not because of Ralph or Jack’s influence, but just because he knows it is the right thing to do.  This would be the business user every organization would like to have.

Piggy, the inventor and intellectual, uses his inventiveness to benefit the group.  It is Piggy who initially finds a conch and blows it to bring all the boys together on the island and Piggy who makes a sundial so they can tell the time.  Piggy, in the world of enterprise file sharing would have early on blown the conch he discovered, to alert IT and Security teams that they needed to work together to give business users a way to share files securely.  Piggy would also be the one to design and implement the system.

So how does this story end?  In Lord of the Flies, the boys are eventually rescued and returned to civilization, but not without some casualties.  The adult who steps onto the island does remark that he would have expected better from British boys!

How does the story end in enterprise file sharing?  I’m betting on the Ralphs and Simons of the world to give this story a happy ending.

Accellion in Action: HIT Entertainment’s Enterprise Deployment

Tuesday, May 10th, 2011

When you think of Barney, Bob the Builder and Thomas the Tank Engine, enterprise software isn’t usually the first thing that comes to mind, but today Accellion announced that the company behind these widely cherished children’s entertainment brands, HIT Entertainment, has implemented a virtual, enterprise-wide deployment of Accellion Secure File Transfer.

 

HIT Entertainment Protects their Brands with Accellion

The press release goes on to detail:

“HIT Entertainment is responsible for well-known programmes such as Bob the Builder, Thomas & Friends and Fireman Sam, and has a pressing need to protect its intellectual property when sending so many files to its offices across the world,” said James Herbert, HIT Entertainment’s Senior Manager of Global Infrastructure.

Accellion originally replaced FTP as the main method for file transfer at HIT Entertainment, a way of working that was cumbersome, not secure and led to an additional management overhead. After three years, the company was ready to commit for a longer period with Accellion. “The product is easy to run,” said Herbert, “it virtually manages itself.”

Well known brands need to protect their intellectual property in a way that’s easy-to-use for employees and easy-to-manage for IT staff.  Accellion solutions can help.

What we can learn from our friends in the Government

Tuesday, May 3rd, 2011

Reports from the team who attended GovSec in Washington DC highlighted that there is a lot to be learned from the government sector.  Based on recent conversations, it seems to me, government IT organizations are among the most risk averse of all industry sectors.  Risk adverse organizations are:
o    Proactive; they don’t wait for a data breach to happen, they secure their communications
o    Most likely to have an organization-wide data risk assessment and profile
o    Understand that a true adversary only has to be right once, but your security measures have to be right in every possible way
o    And understand that the most destructive adversary can easily come, accidentally or intentionally, from within the organization.

We’ve seen plenty of high profile, reputation-destroying data breaches this month, including the recent notable addition of Sony to the list.  We’re still waiting for specifics on how many of these data breaches occurred, and the true price Sony will ultimately pay, not just in lost revenue while the network was down, but also in lost future revenue as gamers switch to the competition.

Most organizations wait till a major problem happens, and then take action.  John Pironti, during a recent Accellion-sponsored Enterprise 2.0 webinar, entitled “5 Security Essentials for Collaboration” put it best.  After a data breach, companies,   “fire people, hire a new outside security team, and throw a lot of money at finding a solution.  For six months.  And then attention wanes.”

Maybe it’s because politics is fickle, maybe it’s driven by regulatory compliance, or maybe it’s because government – federal, state and local agencies have seen the repercussions of data breaches and have digested tough lessons from their peers.  Whatever the reason, we have seen robust growth in this segment, with new Accellion government wins across the globe, from The Bahamas to Western Australia, from governing bodies to law enforcement agencies.  Organizations have to react once a data breach or noncompliance occurs, but it’s great to able to point to some good news and a market segment that’s being proactive.

 

Accellion in Action: Enterprise Deployment for Hogarth Worldwide

Tuesday, March 8th, 2011

Today Accellion announced the recent deployment of Hogarth, another global, enterprise-wide implementation for the Accellion managed file transfer solution.

Part of the WPP advertising group, Hogarth Worldwide provides copy localization for advertising agencies across the group. Clients around the globe rely on Hogarth to translate master creatives in print, TV and digital formats, from English into local languages.

Initially deployed to provide employees with a quick, easy way to share files with external customers, Accellion has quickly become the standard for sharing information internally among Hogarth’s own employees who are located across multiple sites. According to Alex Buchanan, technology operations director for Hogarth, “many of our employees prefer to use the Accellion solution over old ‘drop box’-style solutions as it is much easier to use.”

With encryption and authentication checkpoints, recipients are validated so confidential information is not overexposed. The comprehensive audit trail provided by Accellion was also important to Hogarth for internal and external audits.

Other significant enterprise deployments of Accellion at the WPP advertising group include Ogilvy & Mather, Young & Rubicam, Grey Global and Team Detroit.

Additional information about our Advertising customer deployments can be found here.

European Data Protection Supervisor Recommends Regulation…

Wednesday, January 19th, 2011

I just read the recent “Opinion” from the European Data Protection Supervisor on the communication from the Commission to the European Parliament, the Council, the Economic and Social Committee and the Committee of the Regions.  Are you still with me?  Hang in there, because it’s easy to get lost in this story.

On January 14, 2011 the European Data Protection Supervisor, Peter Hustinx, gave his written opinion regarding the Review of the Data Protection Legal Framework and he gave it a qualified thumbs up – I think?

Here is the text …

“Opinion of the European Data Protection Supervisor on the Communication from the Commission to the European Parliament, the Council, the Economic and Social Committee and the Committee of the Regions – A comprehensive approach on personal data protection in the European Union”

…and then follows 36 pages in total, which you can read here.

The “Opinion” only came out this week and I noticed a scarcity of people have jumped in yet and distilled this “Opinion” down to anything that the rest of us simpletons can understand. Fortunately this morning I woke up to the V3.co.uk article entitled “EU data protection supervisor backs new law”.  It looks like a qualified “thumbs up” is a good assessment.

In my quest to understand this “opinion” I did also find interesting links to the European Data Protection Day on January 28 and an impressive program of events organized by the Council of Europe and the European Commission.  Mr. Peter Hustinx is one of the featured speakers.  Hopefully his speech will provide the simplified version of what he was trying to say.

In the meantime – I’m taking his “Opinion” as a thumbs-up for data-protection in the European Union – and that’s good news.

FAX Data Breach Gets Costly

Tuesday, November 30th, 2010

We are getting ready to move offices and the topic of the FAX number came up in our pre-move planning session. The claim was made that no-one uses the FAX machine any more.

I imagine the Hertfordshire County Council in England wishes their employees also hadn’t used the FAX machine. The County Council just got slapped with a £100,000 fine by the Information Commissioners Office (ICO) in the UK after a data breach originating at the FAX machine in June 2010. As reported last week in SC Magazine, employees in the childcare litigation department FAXed information to the wrong recipients on two separate occasions.  The size of the fine was determined in part because the two incidents were 13 days apart and the County Council failed to take sufficient steps to prevent the second breach. Sometimes people over think the solution – unplugging the FAX machine would have done the trick.

We’ve written before about the security hazards of the multi-function copier, scanner, printer in Digital Time Bombs. After hearing about this latest data breach perhaps we should ditch the FAX machine in the move.

Data Breach Disease Strikes NHS – Again

Tuesday, August 24th, 2010

Yet again, an NHS trust is hit by a data breach, as reported in SC magazine today.  This time a CD of patient data was found at a bus stop. This is not to be confused with the data breach from the USB stick containing medical records that was found in a UK car park.

It is barely a month since we blogged on this topic, NHS Trusts Failing to Protect Information, and the Information Commissioner’s Office (ICO) issued a press release with the ominous title Poor Data Security in the NHS.  Earlier in June, Mick Gorrill, head of enforcement at the ICO, said: “Everyone makes mistakes, but regrettably there are far too many within the NHS. Health bodies must implement the appropriate procedures when storing and transferring patients’ sensitive personal information. We have taken a number of steps to explain the importance of personal data to NHS bodies and help them comply with the law. We will continue to do so.”

Looks like Mike and the ICO have their work cut out for them. Here is a checklist of to-don’ts that the ICO might find helpful in their data protection enforcement efforts with the NHS trusts.

• Don’t use USB sticks for transferring confidential patient data
• Don’t use CDs for transferring confidential patient data
• Don’t post confidential patient data on unsecure FTP sites
• Don’t allow use of P2P file sharing on NHS computers

Also our earlier blog posting Top 3 File Transfer Security Mistakes should be required reading for all NHS trusts.

Environmental Impact of Email Attachments – Storm in a Teacup?

Monday, August 16th, 2010

The Mother Jones article from last Monday entitled “Are Email Attachments Bad for the Environment?” is certainly getting a reaction. The article is still circulating the twitosphere, even one week later.

The story features some interesting quotes from Matthew Yeager, identified as a data storage expert from the UK, including:

“sending an email attachment of 4.7 megabytes creates as much greenhouse gas as boiling your tea kettle 17.5 times.”

You have to hand it to the English – they can reduce the complexity of the Internet and the global debate on greenhouse gases down to the topic of brewing a cup of tea.

While Yeager didn’t go into the details of his tea kettle calculation – many commenters have, including Anonymous, who provided the following:

According to PBS Roughscience, a standard kitchen kettle takes about 2000 Watts of electrical power. Thus, 17.5 × 2 kW = 35 kW. But that’s power (P), not energy (E = P×T) over time period T. If it takes about 10 mins to boil a kettle then, 2 kW / 6 = 0.33 kWh per boil.

If a typical British kitchen kettle is assumed to hold 1.5 liters, that’s about 6.34 US coffee cups, according to Google convert. According to General Electric, brewing 3 pots of coffee (6 cups) requires 1 kWh of energy. So, 1 brew (or 1 kettle boil) takes about 0.33 kWh, which seems consistent.

The controversy seems to arise from whether the claimed 35kW per email is a reasonable number or not.  As one IT manager commented

“Now I know our server room is warm, but the damn thing would melt if it was using that much energy.”

While nobody disputes that email attachments take up storage, and that redundancy, backups, and sharing of email attachments explodes the storage requirements, what does seem to be up for debate is the scale of the energy consumption.  As of today, Mr Yeager hasn’t come forward to explain or revise his estimate, which might explain why this story keeps circulating.

I think I need to sit down with a cuppa to think this one through.

NHS Trusts Failing to Protect Information

Thursday, July 15th, 2010

National Health System (NHS) organizations in the UK have accounted for more than once quarter of the data security breaches reported to the Information Commissioner’s Office (ICO). If this keeps up the ICO could become a profit center with their new powers, approved in April, to impose penalties up to £500,000 on offending organizations.

The ICO issued a press release on June 15 announcing Poor Data Security in the NHS.  NHS Stock-on-Trent and Basingstoke and North Hampshire NHS Foundation Trusts were the latest NHS bodies found in breach of the Data Protection Act (DPA). Mick Gorrill, Head of Enforcement at the ICO was quoted “Everyone makes mistakes, but regrettably there are far too many within the NHS.”  He went on to add “We have taken a number of steps to explain the importance of personal data to NHS bodies and help them comply with the law.”

But wait a sec, just yesterday, July 14, there was another press release announcing Birmingham Children’s Hospital NHS Foundation Trust found in breach of the Data Protection Act (DPA).  Did the folks at Birmingham Hospital NHS Trust not get the message from the ICO?

Accellion Cloud beats the Volcanic Ash Cloud

Monday, May 17th, 2010

Yet again, ash clouds from the Eyjafjallajökull volcano in Iceland are seriously affecting airline traffic, with Heathrow airport closed again this morning. Over the past few weeks millions of passengers - and important documents – have been stranded across Europe and the world.

Clyde & Co. LLP, a leading international law firm based in London, recently purchased the Accellion secure file transfer solution to ensure safe delivery of sensitive documents and avoid paying courier charges.  They had originally chosen an Accellion hardware appliances but then fate intervened: Clyde & Co. ran into problems thanks to the flight disruptions caused by the Icelandic volcano: it wasn’t only passengers that were struggling to get home, the Accellion appliance could not be delivered by FedEx either.

But it got worse than that. The continuing disruption also meant that courier companies couldn’t deliver legal documents to Clyde & Co’s clients either – a major disruption of service for a legal company.

Clyde & Co. IT manager, Phil Newnham, called Accellion for urgent help and while we couldn’t charter a plane, we set up a hosted Accellion cloud appliance and within minutes Clyde & Co. was able to send confidential legal documents. Clyde & Co. files were flying again.

Even volcanoes can’t stop Accellion.