3 strikes28 Oct 2015 12:42
Any breach of security has massive ramifications for the targeted company, think lock everything down and only give employees access on an ad-hoc basis.
I've worked at companies that have had breaches, not on the scale as TalkTalk or Sony, but any breach should scream out to management that processes are broken and should be replaced especially where customer data is involved.
TalkTalk have been rather cavalier in playing down the latest breach, they have no idea what data was taken and customers that are looking to cancel (using the breach as an excuse) are being told to prove their data was taken!
Where customers are your business, your business is your customers... sadly not in TalkTalks case.
The third breach this year, TalkTalk have failed to implement even basic measures (encryption) to secure customer data.
I imagine their systems remain as lax as they did after the first breach and here we are again, third in a year.
Companies that fail to protect their customers data should be suspended from trading until they can prove measures have been implemented.
Heck they could even use guidelines such as PCI, securing systems & data is not overly complex, the issues lie in the processes on accessing that data which PCI addresses.