SOT: Data protection

2008-01-15 Thread Dominic Watson
Hi all, I'm putting a quote together for a client and they are concerned with security and data protection for a single table in their database that stores contact details of their employees. Does anyone have experience of this and know what I need to take into consideration? Thanks, Dominic --

Re: SOT: Data protection

2008-01-15 Thread Tom Chiverton
On Tuesday 15 Jan 2008, Dominic Watson wrote: stores contact details of their employees. Does anyone have experience of this and know what I need to take into consideration? You need to identify all the threats against the system, which you will attempt to mitigate (i.e. is it your job to

Re: SOT: Data protection

2008-01-15 Thread Dominic Watson
Ok thankyou. I need to get this proposal out in the next hour so it's a bit late for the book! The threats I need to be aware of then are internet based attacks on the login system and database right? I'm wondering, as the site and business is small and not a major public target (won't be indexed

RE: SOT: Data protection

2008-01-15 Thread Peterson, Chris
: Tuesday, January 15, 2008 7:59 AM To: CF-Talk Subject: Re: SOT: Data protection Ok thankyou. I need to get this proposal out in the next hour so it's a bit late for the book! The threats I need to be aware of then are internet based attacks on the login system and database right? I'm wondering

Re: SOT: Data protection

2008-01-15 Thread Tom Chiverton
On Tuesday 15 Jan 2008, Dominic Watson wrote: Ok thankyou. I need to get this proposal out in the next hour Dube, your in trouble, but you know this :-) I'm wondering, as the site and business is small and not a major public target (won't be indexed by search engines), is having a login

Re: SOT: Data protection

2008-01-15 Thread Dominic Watson
Wow, not to be a mean guy or anything, but if you are asking these type of questions within an hour of your deadline, you may not be the right person to do this... Security is not something that you should 'try', it needs to be done properly to protect you and your customers assets. Once

Re: SOT: Data protection

2008-01-15 Thread Dominic Watson
Wow, not to be a mean guy or anything, but if you are asking these type of questions within an hour of your deadline, you may not be the right person to do this... Security is not something that you should 'try', it needs to be done properly to protect you and your customers assets. Once

RE: SOT: Data protection

2008-01-15 Thread Peterson, Chris
Sorry man, didn't mean to sound abrasive. =) Chris -Original Message- From: Dominic Watson [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 15, 2008 10:03 AM To: CF-Talk Subject: Re: SOT: Data protection Wow, not to be a mean guy or anything, but if you are asking these type

Re: SOT: Data protection

2008-01-15 Thread Dominic Watson
Sorry man, didn't mean to sound abrasive. =) Chris I know ;). You nailed the point though - I have to cover myself and hot up quickly. I have ordered the 'Threat profile' book, looks riveting! Dominic -- Blog it up: http://fusion.dominicwatson.co.uk