Risk Analysis

Summary
In March of 2010, a dismissible media device, such as a flash drive, was stolen from directional Credit Management community (ECMC). Data contained on this device included the names, addresses, Social gage numbers, and birthdates of people who received federal student loans. This info is very much engagementd by identity thieves, and, if the information was non encrypted, could deuce-ace to many individuals becoming victims of identity theft.
The Problem
This information should not consume been stored on this kind of device. According to an article written by Kelly Jackson Higgins of Darkreading (Violation of Sensitive Data Storage Policy guide to Exposure of Info on 3.3 Million Student bring Recipients), storing information on such a device is a violation of ECMCs policies. Having the information on a removable drive creates security run a risk because it is so portable. Encryption is often non-existent, especially if the removable device is a flash drive. It is not clear is the theft was committed or enabled by an employee or was strictly an outside entity.

Impact
3.3 million recipients of federal student loans ar voltage victims of this theft. This includes accounts that date back 15 years, as around of the files were archival records.



Each person is at direct risk for identity theft given the kind of information stored on the device. The perpetrator can use this information to open dishonorable accounts. This information can also be sold to others to use to create new identities.

Corrective Action
ECMC immediately began issuing garner to inform those affected, and offer to provide a year of impute monitoring through Experian. ECMC also began testing other potential weak areas in security. According to Privacy Compliance & deoxyadenosine monophosphate; Data Security, by working with local police, the FBI, and the Department of Educations Office of Inspector General, ECMC recovered the device. It was determined that the information did not appear to be compromised,...If you want to get a full essay, order it on our website: Orderessay



If you want to get a full essay, wisit our page: write my essay .