Dear Customer,  

Welcome to the GSS monthly update of news, views and advice surrounding today’s top IT security issues. 

Security breaches are still hot on the agenda this month with further news of data loss hitting the headlines.  Most notably, the recent reports of the secret files left on a train are yet another government security breach to add to an already long list.

With many stories hitting the headlines, it seems data loss is now a common occurrence.  But this doesn't mean organisations should start to regard data loss as an insignificant issue.  Our featured article examines the real cost of a security breach and asks, what are the hidden expenses – both tangible and intangible.  Read the article below.

We are also addressing the recent introduction of the new PCI requirement section 6.6 in our reader Q&A section.  While many parts of the standard have caused headaches for companies using credit cards in their business, Section 6.6 is especially demanding.  A document has now been released by the PCI Standards Council to clarify the complex area. We look at how to approach the new section in our reader Q&A below.

In last month’s newsletter, we asked if you felt the current economic slowdown would effect IT security budgets.  Our poll shows 60% of you feel that some budgets will be effected.  This falls inline with the recent reports by industry analysts at IT market research company Gartner who expect the economic instability to weigh down IT budgets.  This month we want to know if you feel the new PCI documentation on section 6.6 helps to clarify the requirement - vote in our July Poll.

As always, if you have a security concern you would like to put to us, or you have any suggestions, improvements or comments you would like to make, please don’t hesitate to email me.

David Hobson
Managing Director

What are the new PCI requirements?

This month, John from Reading emailed David with a topical question: "Companies now need to be aware of the new Section 6.6 of the PCI standard that came into force at the end of June.  But what are the new requirements and how should we approach them?"

Read David's answer  |  Download free PCI s6.6 supplement

If you've got a question you'd like to put to the experts, send it to emaildavid@gss.co.uk

Safe as Houses

Owning and managing over 20,000 properties throughout Walsall, Walsall Housing Group needed its IT systems that support the daily activities of over 700 staff to run smoothly and securely.

The group had to consider the implications should any sensitive assets, research or personal information be disclosed. Phil Pettifer, network and security manager, contacted Global Secure Systems to have the exposure of their corporate network to attackers independently assessed. “On its first inspection, GSS were able to identify some medium risks that could potentially unlock our system...

Read more

---

MD of GSS interviewed on BBC

Our newspaper, printed for the InfoSecurity Show in April got further than Olympia. We were called by the producer of Digital Planet on the BBC World service, who asked David Hobson to be interviewed over our lead story – “Beware, the Olympics are coming”. David Hobson, GSS Managing Director, takes up the story: “I arrived at Bush House in London for reception to stare blankly at me – the producer had been off sick and...

Read more

The real cost of a security breach

In its 2006 annual report for the fiscal year ended 27 January 2007, T.J. Maxx recorded a pre-tax charge of approximately $5 million for costs incurred in connection with the computer intrusion it formally disclosed in January 2007.

This charge covers actual costs incurred to investigate and contain the breach, strengthen its computer security and systems, and communicate with customers, as well as technical, legal, and other fees. $5 million may suggest that it got off lightly but is this just the tip of the iceberg? What are the hidden costs of a security breach?

Read more

GTA GB-OS 5.1 available to upgrade

In last month's newsletter, we reported the imminent release of GTA's GB-OS version 5.1 - the new version is NOW available.  GB-OS 5.1 builds upon the Unified Threat Management foundation for GTA Firewall UTM systems by adding features and enhancements that further expand the flexible implementation option for the units.

The new features include Surf Sentinel enhancements, online activation & licensing for GB-Ware, advanced routing with OSPF and BGP and Single Sign-On authentication with Active Directory. Try a free demo of GB-OS 5.1!

• If you are an existing GTA customer with a valid Annual Maintenance contract and would like to upgrade your GTA Firewall UTM system, you can upgrade it NOW with no charge.  Simply log into the GTA online support center to upgrade.

• If your Annual Maintenace contract has expired, it's quick and easy to renew it and you can still qualify for free upgrades available for your system for a period of 12 months.  Simply contact your GSS account manager NOW.

Upgrade to GB-OS 5.1  |  Renew your Annual Maintanence

---

Voltage Security and Websense join forces

Information encryption specialist Voltage Security and Websense have launched a new integrated security solution.  The Websense Data Security Suite has integrated with Voltage SecureFile and its identity based encryption technology to provide protection for sensitive information. The new integration provides customers with the ability to identify and protect their sensitive information across all systems where it may travel: Web, email, applications and endpoints...

Read more

---

AppGate Security Server 8.2 Released

AppGate Network Security has now launched version 8.2 of its Security Server, one security system for all access. Among the features being released in this new version is the possibility for the administrator to assign a remotely connected client a fixed IP address on the corporate network, an address dedicated to a user and independent of the user’s location...

Read more