Business Security

Card Skimming

The act of using a skimmer to illegally collect data from the magnetic stripe of a credit, debit or ATM card. This information, copied onto another blank card\'s magnetic stripe, is then used by an identity thief to make purchases or withdraw cash in the name of the actual account holder. Skimming works by replacing a card reader like an ATM with a camouflaged counterfeit card reader. The counterfeit reader records all of the data on a credit, debit or ATM card as it passes through the skimmer. In addition to ATMs, other locations where card skimming happens include restaurants, taxis or other businesses where an employee will take the card from the actual account holder in order to run the charge. In these instances, the thief has fitted the card reader with a skimmer, or uses a hand-held skimmer hidden in a pocket.

DDoS

Short for Distributed Denial of Service, it is an attack where multiple compromised systems (which are usually infected with a Trojan) are used to target a single system causing a Denial of Service (DoS) attack. Victims of a DDoS attack consist of both the end targeted system and all systems maliciously used and controlled by the hacker in the distributed attack.

Privacy Policy

The policy under which the company or organization operating a Web site handles the personal information collected about visitors to the site. Many Web site operators publish their privacy policy on their Web site. The policy usually includes a description of the personal information which is collected by the site, how the information will be used, with whom it will be shared, and whether the visitors have the option to exercise control over how their information will be used. All TRUSTe Web site licensees are required to post privacy statements. ((See also (Opt-in) - (Opt-out), and (TRUSTe))

Risk Assessment

A study of vulnerabilities, threats, likelihood, loss or impact, and theoretical effectiveness of security measures. The process of evaluating threats and vulnerabilities, known and postulated, to determine expected loss and establish the degree of acceptability to system operations.

Risk Management

The total process to identify, control, and minimize the impact of uncertain events. The objective of the risk management program is to reduce risk and obtain and maintain DAA (Designated Approving Authority) approval.

Gloss Plugin made by: Joe Casabona