> 2. How the hell do I provide full disclosure when asked to, when a lot of
> the relevant personal data is spread all over the system in obscure log
> files and on numerous backup tapes?
I think there is an element of reasonableness here. If the information is
not available without disproportionate effort (of course, I don't want to be
the test case for this!), then it needn't be provided - at least I think
that's how it works!! All computer systems are backed up (well, they should
be, at least). If you have to correct some data, it is not reasonable imho
to expect you to correct all the backups as well. Similarly with disclosure.
--
Tim Wright
IT Security Manager
Fuji Bank, London
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
|