Archive for September, 2010

Secure Drop-Off Shredding – Is it Really Secure?

Wednesday, September 29th, 2010

dropoff 150x150 Secure Drop Off Shredding   Is it Really Secure?

It seems the latest and greatest fad in “Secure” Paper Shredding is to drop your documents off at postal packaging place.

I see this all over the web where Shredding Companies are advertising hundreds of drop-off shredding locations all over the city where you can leave your sensitive documents for shredding.

At one time I thought that this might be a good idea…

… Until I started to call around.

A few years ago I thought it would be a great idea to have a drop-off location in East San Diego County.

My goal was to find a small locally own postal packaging store or a small stationary store.

After a few minutes of searching on the Internet I found what I thought was the perfect candidate.

I called and upon speaking to a very nice lady I explained that I was a San Diego Shredding company looking to partner up with a local East County store, such as theirs, where customers could come and drop off documents to be shredded at a later time by one of our secure shredding trucks.

I went on to say that their postal store would merely act as temporary custodian of the documents, charge the customers a set price, and then we would come by and shred the document for a certain price – of course, for less than what the customer was charged.

She seemed to think that this could be a good idea and I thought, “Wonderful, this might actually be a great idea to better service customers and make some extra sales!”

I then asked this question, “Do you have a secure location in your facility to store these documents in-between our shredding service visits?”

She responded very matter-of-fact, “I guess we could keep them out back next to the dumpster.”

“Humm” I said, “Let me think about that and I’ll get back to you.”

I quickly said “Thank you” and hung up the phone.

This was a very quick and easy test that most folks don’t really get the security aspects of sensitive document disposal.

It’s not that they’re bad people or people out to commit fraud.

Not at all…

They just haven’t put any time and effort into thinking about these sorts of things.

And that is really the heart of the matter.

Does the place you’re taking your documents to really understand and appreciate the sensitivity of your documents?

I don’t want to imply that all these postal places are not taking care of your sensitive documents.

But I can pretty much guarantee they are not putting all the necessary precautions in place to prevent a security breach of your documents.

How do I know?

Well, Total Secure Shredding has customers who own these postal places and we show up on occasion to service the containers they have.

I myself have actually performed the service on occasion.

The only thing I can confirm about security is that once we take control, my policies and procedures kick into effect and things are secure once we take custody of the documents.

But before that point, I think there’s much left to be desired.

With regard to the National Association for Information Destruction (NAID), it’s not really a big issue since there’s no claim that these postal stores are NAID Certified.

If you look closely, no one is claiming that these are secure facilities. You’re basically on your own in determining if you are leaving your documents at a trustworthy enough location.

I for one, refuse to list any of these locations (some who are in fact my customers) on my website.

Because, no matter what fine print I put on the website as a disclaimer, I’m implicitly endorsing and vouching for the security of your documents at that facility.

And quite frankly, there’s no way in hell I can do that unless they meet the strict guidelines I’ve but in place at my own facility – No matter what increase in revenue I could potentially see.

The liability to the Total Secure Shredding brand is just too great.

One “small” data breach could bring untold damages – Either in terms of real dollars or bad P.R.

So, all in all, please be careful where you drop-off your sensitive documents.

In the name of convenience, you may be sacrificing a lot in terms of security.

Until next time…

Keep Totally Secure,

Mike

Share and Enjoy:
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?
  • services sprite Secure Drop Off Shredding   Is it Really Secure?

Paper Shredding Paranoia

Tuesday, September 7th, 2010

paranoia 150x150 Paper Shredding Paranoia

“I always feel like somebody’s watching me… ” (Rockwell)

Hey Folks,

I often get questions about what should and shouldn’t get shredded…

Actually, I get that question on a daily basis!

It’s funny that sometimes customers will come in for shredding down at our facility and actually make the excuse that the stuff they are shredding isn’t even that important – However they still want to watch and make sure it all gets shredded.

And for sure, not everything that is or should be shredded is just old tax returns, utility bills, bank statements, and cancelled checks.

We see a lot of old business cards, holiday cards, and the mailing addresses ripped off of old magazines.

Perhaps this is where customers get the notion that the stuff they are shredding isn’t all that important.

First of all, I don’t judge what my customers do and don’t deem important enough to shred.

I for one shred everything. I even had a customer that brought in multiple boxes of old Playboys for shredding… Go Figure!

Second of all, there’s a very good reason to make sure everything that has your name plus any sort of contact information should be properly destroyed…

That reason is called Social Engineering.

You may or may not have heard of social engineering.

… But is goes something like this:

Let’s say you throw away a bunch of old copies of Business Week or your subscription to the Wall Street Journal.

And let’s say that this old magazine or newspaper has your name and address – Sometimes they’ll even have your phone number listed.

Now, let’s say some Jerk finds your old magazine or newspaper, with your contact information, and decides to give you a friendly reminder call…

Maybe he’ll say that your subscription is about to expire and if you would like to provide your credit card information he can continue sending your subscription without interruption.

Maybe he’ll be so cunning as to ask if you want to extend the subscription for another year for only 50% more. Or maybe he’ll even throw in the free football phone!

And on top of everything, there’s a good chance you’ll hastily pull out your credit card and provide him exactly everything he needs in order to make the charge.

If this Jerk is smart, and you’re lucky, he’ll only make a small charge on your credit card so you won’t even know you’ve been scammed.

If you’re unlucky, he’ll run up your credit card so there will be no doubt you’re the victim of I.D. Fraud.

Or perhaps, he will just put a small charge on your card and then sell the information to someone in Nigeria who will max it out.

Don’t think these Jerks exist?

… Here’s one…

His name is Kevin Mitnick and apparently his biggest problem is “Staying Legal.” Here’s the full article.

This guy spent 5 years in the hoosegow for calling up employees of various large companies such as Novell, Motorola, and Nokia and using his “schmoozing” skills “to get source code and other sensitive information.”

To good news is that this guy uses his infamous reputation to make a living as a consultant, speaker, and author (sarcastic tone).

Here’s the deal…

This guy was able to talk his way into some pretty sensitive information from people who really should have known better.

I guarantee there are loads of just as sophisticated people out there trying to pry you from your hard earned money. All they have to do is get enough contact information, with just enough relevant personal information, in order to sound believable… and then it’s just a matter of making enough phone calls.

Just this year I had someone from a cell phone company call me to settle a small bill (about $35) that supposedly was overdue. I told them to send me a bill. They wouldn’t until I confirmed some more personal information. I refused and they got upset and eventually hung up – never to call back.

So indeed, these jerks are out there (it’s not always a “he”; in my “phone company call,” it was a “she”).

But there are some precautions you can take. In a recent blog, I listed 10 Identity Fraud Prevention Tips

Tip “Two” specifically discusses how not to fall victim to Social Engineering.

Another good tip is to shred anything that may contain your personal information… even if at first glance it may seem silly or paranoid.

In the end, I won’t think any less of you for bringing in as much as you see fit to ensure you remain free from I.D. Fraud.

Actually… Welcome to my world of Paper Shredding Paranoia!

Until next time…

Keep Totally Secure,

Mike

Share and Enjoy:
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia
  • services sprite Paper Shredding Paranoia