Privacy A Corporate Responsibility Ronald Ross CEO

Privacy A Corporate Responsibility Ronald Ross, CEO

Privacy A Corporate Responsibility – – – How bad it gets? Social and economic implications Legislations Challenges MSS and privacy Conclusion

Refreshing Statistics • The U. S. Federal Trade Commision’s Hotline received 445 phone calls per week in November of 1999 • By June 2001 the number rose to 1800 calls per week

Categories of Identity Theft • • Credit Card fraud Unauthorized Phone or Utility Services Bank Fraudulent Loans Government Documents or Benefits Other Identity Theft Multiple Types

More Statistics Source: U. S. Office of the Inspector General, August 1999

Canadians Accessing the Internet Source: Industry Canada

Use of the Internet by Sectors Source: Industry Canada

Barriers to E-Commerce Development Source: Deloitte and Touche Source: Ekos Research Associates

Privacy Legislations Ø CANADA: q Personal Information Protection and Electronic Document Act, April 13, 2000 Ø U. S. : Health Insurance Portability and Accountability, 1996 q Children’s Online Privacy Protection Act, 1998 q Gramm-Leach-Bliley Act for the banking industry, 1999 q Ø Europe: Data Protection Directive, 1995 q Telecommunications Directive, 1997 q Ø Australia: q The Privacy Amendment Act, 2000 Ø Japan: q Guidelines Concerning the Protection of Personal Information Associated with Electronic Computer Data Processing in the Private Sector, 1989

Most Recent Developments Ø U. S. : Federal Trade Commission will hold a workshop in December 2001 to assist companies with writing privacy policies that comply with Gramm-Leach-Bliley Act q October, 2001 - California Creates Identity Theft Law, Senate Bill 168 q Ø Europe: Anti Spam legislation q Echelon report accepted q

Security and Privacy Ø IT Security and Privacy are closely related Ø Without proper security and security policies, the privacy cannot be enforced Ø Technology is just an enabler to protect the private information Ø People are managing the technologies and risks

Challenges Ø Complexity of the systems, including the OS. Microsoft Windows 2000 estimated to have 35 -40 million lines of codes Ø Network configuration errors Ø Shortage of qualified IT security personnel and turnover Ø Costly to maintain in-house Ø Lack of funding Ø Human factor

Compliancy with the Privacy Act: Basic Questions Ø Ø Ø Do you have a Security policy in place? Do you enforce your Security policy? Do you encrypt all private and sensitive data? Do you monitor any unauthorized access to private information? How the cookies are handled in your organization? Who can access the cookies?

How JETNET Can Help You

A Brief Introduction to JETNET • Founded in 1998 in Ottawa as a “Jet. Form Affiliate” – Design of International Deployment of VPN/FW • • • First mover in “Managed Security Services” Recognized as a “Pioneer” by Tele. Management Ottawa, Toronto Locations 7/24 Internetworking Operations Centre (IOC) JETNET is Canada’s leading Managed Security Services Provider – Impressive Customer List – Patent pending technology and service delivery

JETNET Technology Partnerships • Partnerships with the leaders in the security market • Best of breed technology offering

• Focus – • 3 Year design and development Process Driven and extensive expertise Investment in Infrastructure has been made Annuity, High Leverage Model in a High Growth Market – • “Blue Chip” Customers, Systems, People Trust factor/Relationship has been established and maintained Mature Offering – – – • Our only offering is MSS (Has been for the last 3 years) Track Record – – • We Offer to You. . . Ability to compensate your team and deliver Continued Support – Employees, Customers and Investors

JETNET Services · Managed Firewall · Managed VPN Branch · Managed VPN – Remote Access · Managed Radius Authentication Service · Managed Authentication – VPN · Managed Authentication – Web · Bundled Security Service – FW, VPN, FW/VPN · Professional Services · Vulnerability assessment services

MMRH Service Offering

JETNET Global Coverage - Coverage by countries

JETNET’s Technology Can Help To Safeguard Your Network Ø Security Activity Manager Collection Agent or SCA is an agent on a dedicated HW Ø SCA can securely track different events and log files within the LAN’s DMZ area Ø Top 10 Web sites reports Ø Top 25 Users Ø In-house developed or third party applications for monitoring privacy compliance can be deployed and alerts can be generated in a real-time

Business Models Comparison JETNET In-house

JETNET – Customer Data Flow Customer Deployment JETNET Intelligence JETNET Monitoring Customer Feedback VPN Device FW IDS E-mail JETNET SCA JETNET IOC SAM VPN GW Phone, pager

SCA Deployment

Monitoring The Privacy Act Compliance Ø Privacy compliance audits Ø Recommendations/implementation for improvement, based on the results of audits Ø Proactive Managed Security Services – protect the networks Ø Managed applications inside the customer network (SCA) to monitor any unauthorized behavior and notify the customer

Conclusion “Technological advances have also facilitated ’identity theft, ’ the availability and misuse of electronic account and personal information. Identity theft poses significant risks to financial institutions and individuals alike. The Internet is also engendering other bank-related frauds. ” Statement of Charles L. Owens; Chief, Financial Crimes Section, FBI; in a hearing on Financial Instrument Fraud held by the Subcommittee on Financial Services and Technology; Committee on Banking, Housing, and Urban Affairs; U. S. Senate; Sept. 16, 1997.

Thank You