Page views!

Saturday, 15 October 2016

ZURICH INSURANCE LOSES DATA!

Stakeholders: customers, Zurich Insurance

Strand 1:

This article discusses how Zurich Insurance has lost the data of 46000 of its customers. This has several social and ethical concerns. The main one is that the customer's data was not secure. Which ultimately led to the loss of their data. This data that went missing could have been intercepted illegally by hackers. In addition to the lack of security, Zurich insurance had no plan to stop the missing data from being misused, if it went missing. Further, this lack of security, ultimately led to the privacy of the users being breached. The stolen information could be sold to third party organizations, used for fraud, or even identity theft. Furthermore, another lack of security was due to the fact that there was no system in place, in order to check if the data in the database was missing or not, which is why Zurich only found out about the missing data a year later. The system used by Zurich to transfer data to a data storage area was unreliable.

Strand 2:

This affects many scenarios. The most of important one is business and employment. If such a scandal happens, the company loses a lot of reputation, which may lead it to becoming bankrupt. This causes all its employees to leave, and since they come from a company of bad reputation, it may be difficult for them to get jobs at any insurance firm. However, such scandals may benefit the world as a whole, because it would force other companies to strengthen their security to ensure user privacy; hence making it much harder for data to get lost and/or misused.



Strand 3:

There are several IT systems at play here. The first one is the database itself. The database is essentially run by several servers, and it is transferred to data storage servers (such as the one in South Africa) through network connections. To ensure that data doesn't get lost, the connection must be very stable, so that any small interference would not hinder the transfer of data. Furthermore, the network must also be secure and encrypted, in order to prevent any illegal access of the data. In addition to that, there should have been a backup database somewhere in order to make up for such loses of data. There should also be software which prevents the download of data being transferred onto devices with small storage systems. In addition to that, to initiate the data transfer itself, there must be several authentication procedures to ensure that not anyone can initiate data transfer. Furthermore, another solution could be creating one database which contains all credit card numbers, and another which contains credit card security codes (this is basically relational database but on a much larger scale), this way if any data is stolen, the hacker cannot effectively use the credit card information.


http://www.bbc.com/news/business-11070217

No comments:

Post a Comment