SAS 70

Jul 31 2008   2:06PM GMT

Is Olympic Security enough data protection? SAS70



Posted by: SAS70ExPERT
Auditing, CIO, Compliance, DataCenter, Disaster Recovery, Management, SAS 70, Security, Security management, Third-party services

If I were going to the Olympics as participant, business person or ticket holder, then I would want to consider how much security I need to keep me safe. The 2008 Olympics will cause a heightened awareness of security for the Beijing metropolis and training will occur on many areas of security. Similar to a SAS 70 audit, many types of security will be audited: physical, environmental, network, logical access to applications and systems, and computer operations. A SAS70 audit should provide you with comfort that your assets are safe, that the controls to protect them are operating effectively and that your business is efficient.

 

If I were going to the Olympics, here are a few safety principles to follow:

  1. Lock your cell phone with a password. If you leave your phone at your favorite restaurant, then you want to be sure that no one can gain access to your contacts, phone numbers, and emails. In addition, be sure to list your name and phone number on the screensaver so that someone call you to return it.
  2. Use encryption on all devices. Use VPN/SSL VPN encryption on your laptop, and cellphone.
  3. Never leave your valuables in the hotel unprotected. Always take your ipod, mp3 player, cell phone, and other corporate electronics with you or put them in the hotel safe. If you don’t have a hotel safe, then lock it in your luggage.
  4. If you have USB flash drives, password protect them and encrypt them.
  5. Buy an Olympic necklace. A string around your neck with your hotel key, photo id, and some change could be lifesaver in a foreign country. sas70expert@gmail.com

Comment on this Post

Leave a comment: