Welcome to this, the fifth edition of The ISO27000 Newsletter, designed to keep you abreast of news and developments with respect to ISO 17799 and information security.
The information contained is free to our subscribers and provides guidance on a range of practical issues, plus commentary on recent Information Security incidents.
In this issue we focus specifically on the dangers of security complacency with everyday devices and technology. Included are the following topics:
MOBILE PHONE SECURITY
The Theft of mobile phones continues at an alarming rate. Many users however continue to keep their phones in a "ready to use" state which means that the phone can be used immediately, thereby potentially incurring costs for the user that may not be recoverable. Perhaps more importantly, many phones are used to store confidential data and information.
The following common-sense advice is provided to enhance the security of mobile phones:
- Do not openly display a mobile - keep it out of sight in a pocket or handbag
- Always use your phone's security lock code or pin number
- If possible, avoid using it in crowded areas
- Properly mark your phone with your zipcode/postcode
- If the phone is lost or stolen, report it straight away to the police and to your service provider
- Be aware of your surroundings and the people near to you
- Do not leave it unattended - keep it with you at all times
- Make a note of your phone's IMEI number
- Do not leave a mobile in view in an unattended vehicle
Perhaps more than any other device, the mobile phone is often too familiar to its user to be viewed from a security perspective. If this continues, how long before a mobile phone related incident appears in our "It Couldn't Happen Here, Could It?" section (see later)?