Stories by: Sue Bushell

The Department of Veterans' Affairs is killing two birds with a single stone as it moves to tackle spam and address strict new data protection requirements

The US is badly lagging the rest of the world on privacy legislation and apparently doesn't care

A fierce and prominent opponent of the Hawke government's 1987 plans to introduce a national identity card says nothing has changed technologically in the intervening years that would make a smart card today any more secure than the Australia Card proposed then.

Security strategy is as important as corporate strategy. Getting it right is critical. Learn how detailed cost/benefit information can lead to more effective security management decisions

Ronald Reagan once famously said: "The nine most terrifying words in the English language are, 'I'm from the government and I'm here to help.'" Inside the government itself, the most terrifying words in the English language may be: "The information security office is here to facilitate your office's goals and objectives."

Problems with agency IT security are again under the spotlight, with reports from both Australia and the US highlighting widespread problems with compliance.

Back in May, we celebrated CIO's 100th issue by introducing a continuing series — CIO Retrospectives: Seminal Issues & Technologies — where CIO writers revisit seminal events, issues and technologies we've covered over the years. This month, CIO writers cast their respective eyes backwards at that plucky tag-team of security and privacy.

As American angst over their government's massive domestic spying program soars, the Victorian Privacy Commissioner has warned responsible handling of personal information will increasingly require deft application of the "best custodian principle".

Former Commissioner of US Customs and Border Protection Robert Bonner says risk management has proved indispensable to the strategic goal of preventing global terrorists from striking.

Regulatory requirements like Sarbanes-Oxley, BASEL II and HIPAA were designed to improve governance and security within the enterprise, but at some companies they appear to be doing just the opposite.