I haven’t had a chance to read the Cisco 2010 Midyear Security Report yet, but it should be worth a read. There is a focus on more IT centric technologies as well as a look at spam and the trends there of.

Another document out for review is the 2010 Verizon Data Breach Investigations Report. This was a very good read last year and certainly the sections I have read have been very interesting. While I’m a little confused as to how they gathered their samples the results still prove to be very useful.

The interesting point for this years DBR is that they have included samples from the United States Secret Service breach data. While this may “skew” the output, Verizon believe it gives a more “real world” representation.

So there you have it, two reports to read through. Please get in touch and let us know what you think.

If you want to know a little more about Zeus, we can highly recommend you take a look at the article here.

The premise of the article is to give a high level overview of the roles and tasks a CSIRT needs to perform when an incident occurs. It’s certainly worth a read, even if you’re only considering starting an Incident Response Team within your
own organization.

This does raise the question, are the larger organizations really doing enough when it comes to Incident Response ?

Do you have a team fully capable of dealing with an incident ?

The full article can be read here.

The Information Security Group of Africa has partnered with various local and international agencies & organisations to help combat the massive increase in cybercrime. Our objective is to co-ordinate skills & resources across all sectors of South Africa & internationally in order to break the chain of organised cybercrime.

It was confirmed that the South African Government had suffered R400 million in known losses to cybercrime at the end of 2008. What is really scary is how often cybercrime is unreported or even worse undetected.

Zurich Insurance confirmed that it had lost the personal information of 550,000 South Africans in October 2009. According to a recent Pomenon Institute study, the cost of US data breach incidents increased to $204 per compromised customer record in 2009. Whats more is that the 2009 Verizon data breach report estimates that 91 percent of data breaches were linked to organized crime.

The Protection of Personal Information Bill no 9 of 2009 makes it a mandatory legal requirement to report all incidents where personal information is compromised, and introduces civil as well as criminal liability for non-compliance.

Making it easy to report cybercrime, the eCrime portal enables electronic submission of cybercrime incidents. Not only will the eCrime portal assist organisations to comply with the new reporting requirements, it will also enable more accurate South African cybercrime statistics to be collected.

For further information please email us

or call the

1. Details of Advertising Services: Subject to payment of advertising fees, Users may request for advertising inserts to be placed on the Website. Such advertising request may be granted or denied at the sole and absolute discretion of ISG Africa and ISG Africa extends no warranties and/or guarantees in relation to advertising.
2. Rates:
   

   Advertisement	Location of Advertisement	Duration of Advertisement	Rates
   Advertisement for an event or conference, payable on presentation of invoice.			R900,00
   Advertisement for recruitment of personnel sought and / or positions available.			R900,00

3. Advertising Bookings/Exchange/Refund/Cancellations Policy: Advertising bookings must be made [INSERT] days prior to requested date of publication. Notices of Advertising cancellations must be received in writing [INSERT] days prior to the publication date. Surcharges are applicable in the case of cancellation(s).
4. Enquiries in relation to Advertising Records:
5. Advertisers Warranties: Your request to advertise on the ISG Africa Website confirms to ISG Africa Your rights to all relevant intellectual property contained in the advertising material submitted to ISG Africa and You specifically indemnify ISG Africa in relation to all liabilities damages, losses, actions and claims faced by ISG Africa arising from an intellectual property breach by You or Your agents, employees, contractors or suppliers in relation to such advertising material.
   ]]> http://www.ecrime.org.za/?feed=rss2&p=246 0 http://www.ecrime.org.za/?p=243 http://www.ecrime.org.za/?p=243#comments Tue, 09 May 2000 17:19:26 +0000 admin http://www.ecrime.org.za/?p=243
6. ISG Africa and Your rights under South African Law: ISG Africa is an association not for gain, which exists for the purpose of carrying on, establishing, promoting, managing and controlling, various interest and user groups, as members, for the promotion of education and awareness of information security. ISG Africa respects the privacy of its members and wishes to comply with all laws and regulations including the 1996 South African Constitution and other legislation providing for privacy. As such, ISG Africa seeks to ensure the quality and accuracy of personal information in its possession and under its control, and also, to ensure that all existing and new personal information is collected and processed in compliance with South African law.
7. Personal Information Collected, Principle of Minimality & Purpose of Collection: Please be assured that the privacy of ISG Africa members and Users of our website is of the utmost importance to ISG Africa. The ISG Africa Website collects, processes and stores personal information of its members and Users of the Website:
   1. (1) Relevant and minimal personal information of members is collected for the purpose of managing Member’s affairs with ISG Africa. Please refer also to the membership registration and renewal section on the Website for further details of such personal information. For the avoidance of doubt, Members referred to in this Privacy Policy constitute persons with valid memberships with ISG Africa and accessing or using the Website, as such Members shall also constitute Users of the Website. Not all Users however will have valid memberships with ISG Africa and therefore not all Users shall be Members.
   2. (2) Relevant and minimal personal information of Users is collected automatically by ISG Africa and its authorised technology agents as a result of User’s visits to the ISG Africa Website. This information is used to make Your visit to the Website site more efficient, and analysis thereof facilitates improvements made to Your experience of the Website. Our external Website hosting agents and service providers may also automatically log Your “IP address” which is a unique identifier for Your computer or other access device. Further and to the extent necessary, ISG Africa may utilise Your contact information. Where applicable, personal information submitted by You may be used for communications with You such as marketing or rendering services requested by You from ISG Africa. This information may include, without limitation, Your name, email address, mobile phone and landline phone details. ISG Africa will share your personal information only with third parties involved in the provision of the Services and where required to do so by law. ISG Africa will not edit, disclose or sell any personal information to third parties other than required for the provision of the services and in the ordinary course of business. You agree that Your submission of Your personal information indicates Your willingness for such information to be used as discussed above.
8. Handling of Personal Information: In the event that You submit personal information, such information shall be handled in accordance with the laws pertaining to the handling of personal information in South Africa. To prevent unauthorised access, maintain data accuracy and ensure the appropriate use of information, ISG Africa has in place policies and procedures to protect the personal information ISG Africa collects about Website Users. Users acknowledge that records relating to the provision of services and personal Information may be required to be retained in terms of law, operational purposes and for evidential reasons by ISG Africa and Users expressly agree to such retention and necessary access to such records by authorised ISG Africa persons. Users acknowledge further that it is customary and in the normal course of business, for certain communications to be intercepted and monitored while travelling over telecommunication networks (for system health and forensic reasons), and expressly agree to such interception and monitoring.
   Further, and to the extent necessary, ISG Africa may utilise Your contact information to provide You with information requested by You in relation to membership, events or advertising services offered by ISG Africa.
   Your contact information and the contact information of third parties submitted by You may be used for communications such as marketing and distribution of newsletters with You and/or such third parties This contact information includes without limitation, names, email addresses and/or the name of the respective person’s company. In providing information relating to third parties You, the User warrant that You have the right to provide such information.

   If You choose to submit content for publication such as comments on the website, presentations made at ISG Africa events articles for publication and the like, such information submitted may be published with Your name and other information You have provided to us.

   You agree that your submission of your information indicates Your willingness for Your information to be used as discussed above.

9. Disclosure of personal information: ISG Africa may disclose personal information:
   1. to comply with the law or with legal process;
   2. protect and defend ISG Africa’s rights, equipment, facilities, and other property;
   3. protect ISG Africa against misuse or unauthorised use of the Web site; and/ or
   4. protect other Website Users or third parties affected negatively by Your use of the Website

1. Limited Liability of ISG Africa: The User understands that usage of the Website is at the sole discretion and risk of the User. ISG Africa reserves the right at any time to change or discontinue any aspect or feature of the Website, including, but not limited to, content, hours of availability, and equipment needed for access or use. Notwithstanding the effort placed on maintaining the availability and accessibility of the Website, ISG Africa takes no responsibility for, and will not be liable for the Website being temporarily unavailable or inaccessible.
2. No Warranty: The information contained on the Website is provided by ISG Africa and/or its partners, members, suppliers or agents without warranty of any kind, expressed or implied, including (but not limited to) any implied warranties of reliability, fitness for any particular purpose, timeliness, sequence, completeness, non-infringement of third party rights and/or freedom from errors or inaccuracies.
3. Indemnification of ISG Africa: You agree to defend, indemnify and hold ISG Africa, its officers, directors, employees, agents, licensors and suppliers, harmless from and against any claims, damages, actions and liabilities including without limitation, your loss of profits, direct, indirect, incidental, special, consequential or punitive damages arising out of the use of or inability to use the Website or the software supporting/enabling the Website and reasonable legal and accounting fees, resulting from, or alleged to result from Your use of this Website or the software supporting/enabling the Website.
4. Membership of ISG Africa: ISG Africa may terminate Your Membership, delete Your User Content and/or prohibit Your further use of the Website at its sole discretion, with or without notice.
5. Unauthorised use of the Website: The User is permitted to use the Website for lawful purposes only. Unauthorised use of the Website includes posting or transmission of data which violates or infringes in any way upon the rights of ISG Africa or third parties, which is unlawful, defamatory or otherwise objectionable or which constitutes advertising of goods or services in the absence of written approval from ISG Africa. Unauthorised use of this Website may give rise to ISG Africa instituting a claim for damages against You and/or You may be found guilty of a statutory and/or criminal offence and/or be liable for civil damages.
6. Website Links: From time to time this Website may include links to other websites. These links are provided for Your convenience for the purposes of providing further information. Such links do not signify that ISG Africa endorses the website(s) linked to. You agree that ISG Africa shall have no responsibility or bear no liability in relation to the content of the linked website(s).You may not create a link to this Website from another website or document without ISG Africa’s prior consent in Writing, in which case the terms of Your linking to the Website shall be governed by the terms of a “Linking Agreement” with ISG Africa.
7. Applicable Law and Jurisdiction: This Agreement shall be governed by and be interpreted in accordance with the law of South Africa. Any dispute regarding this Agreement shall be referred to confidential arbitration in terms of the rules of the Arbitration Foundation of South Africa and such arbitration shall be conducted in English in Johannesburg.
8. Severability: If any provision of this Website Legal Notice is found to be invalid by any court having competent jurisdiction, the invalidity of such provision shall not affect the validity of the remaining provisions of the Website Legal Notice, which shall remain in full force and effect.
9. Website Intellectual Property: This Website constitutes software and content (such as text, animation, photos, video, graphics, music, sound and voice) that is the intellectual property of ISG Africa and/or various third parties and subject to the intellectual property laws of South Africa. Further, and to the extent that ISG Africa does not own specific content or such content falls within the public domain, ISG Africa may hold copyright in the selection, coordination, arrangement and enhancement of such information on the Website. No license to ISG Africa’s intellectual property or the intellectual property of third parties has been granted to You unless otherwise indicated. The software and content may not be used in violation of the intellectual property rights of ISG Africa and/or such third parties as applicable. Without limitation on the prohibitions of placed on the User, the User expressly agrees not to:
1. commercially exploit, reproduce, distribute, transmit, display, publish or broadcast any Website content without the prior written of ISG Africa or in the case of third party content, the owner of that content;
2. the User agrees not to claim or convey ownership of Website content either in its entirety or otherwise;
3. modify the Website content for the purposes of reposting to other websites;
4. alter or remove any trademark, copyright or other notice from the Website content;
5. copy or otherwise incorporate Website content into or store in any other web site, electronic retrieval system, publication or other work in any form;
6. frame the Website or any part of the Website.