[gnso-acc-sgb] Auditing firm sector as third party whois accessors?

[Jeff Williams <jwkckid1@xxxxxxxxxxxxx>]

All sgb members,

    So is giving auditing firms  a wise idea for third party
whois accessors?  I am fairly sure some law firms may
also have concerns in doing so as well, eh?  >:)

As an example, see:

Computer Stolen From Auditor's Car Holds Law Firm Pension Data
(18 September 2006)
A laptop computer stolen from an employee of auditor Morris, Davis &
Chan held unencrypted, personally identifiable pension plan data,
including names and Social Security numbers (SSNs) of employees from 
San Francisco law firm Howard, Rice, Nemerovski, Canady, Falk & 
Rabkin.  The breach affects approximately 500 individuals.  All current 
and former partners, associates and employees of the firm have been 
informed of the breach, according to the firm's executive director.

[Editor's Note: Cost of laptop EUR 1,000.  Encryption software
EUR 100.  Not encrypting data on a laptop and losing that laptop while
it contained information belonging to the staff of a legal firm,  
priceless (or whatever the lawsuit determines)]  >:)

Regards,
--
Jeffrey A. Williams
Spokesman for INEGroup LLA. - (Over 134k members/stakeholders strong!)
"Obedience of the law is the greatest freedom" -
   Abraham Lincoln

"Credit should go with the performance of duty and not with what is
very often the accident of glory" - Theodore Roosevelt

"If the probability be called P; the injury, L; and the burden, B;
liability depends upon whether B is less than L multiplied by
P: i.e., whether B is less than PL."
United States v. Carroll Towing  (159 F.2d 169 [2d Cir. 1947]
===============================================================
Updated 1/26/04
CSO/DIR. Internet Network Eng. SR. Eng. Network data security
IDNS. div. of Information Network Eng.  INEG. INC.
ABA member in good standing member ID 01257402
E-Mail jwkckid1@xxxxxxxxxxxxx
 Registered Email addr with the USPS
Contact Number: 214-244-4827