Why firms must heed the BCS

Further to the news that the British Computer Society (BCS) is urging the government to strengthen the laws governing the penalties for inadequate data protection, it is important for all businesses to fully realise the extent of the situation and ensure their security solutions are up to date and able to defend against all possible threats (Calls for tougher data rules intensify, 5 May).

The BCS should, of course, be commended for its commitment to this worthy cause, but organisations are best advised to take responsibility for their own actions from the outset. The loss of customer data is incredibly embarrassing from a brand point of view, with bad press and irreversibly damaged customer confidence far surpassing the impact of any financial penalties.

The move by the BCS should serve as a reminder that firms can and should be doing more to protect their data.

Graham Cluley, Sophos