Did You Lock the Door?

Hardly a week goes by without a news story about a security breach affecting the personal data of customers of a major bank or securities firm. By the time many of these security breaches are discovered, the data in question is in the hands of third parties and not the financial institution itself.

Recent laws and regulatory guidance have clearly laid responsibility for ensuring protection of customers' personal information on the shoulders of senior management and the boards of directors of