Speaking in a panel debate at the (ISC)2 conference that had a theme of 'Have we got the balance right – people, process and technology?', claims were made that younger users, or the ‘Y' generation, did not have a perception of privacy.
With users sharing information on social networking sites freely, Marcus Alldrick, CISO at Lloyd's of London, claimed that there is a need for the ‘Y' generation to understand how the sharing of information is about value and that is why we have identity theft.
Alldrick said: “The ‘Y' generation is going to be harder to convince so it is about understanding their mentality, and making them realise that our ways that they may see as older and slightly fuddy-duddy do make sense.”
Mark Logsdon, deputy head of information risk management at Barclays, claimed that a problem lies in event sharing. A user simply saying that they are having a party as the parents are staying with the grandparents will allow a hacker to know the user's address, mothers maiden name and often personal details.
James Rendell, UK technical manager at IBM ISS, said: “Besides posting data, they don't think about correlation. They are creating a trace for the rest of their lives and there is a huge correlation iceberg somewhere.”
Alldrick said: “We have to change but they have to take on rudimentary principles and understand how criminal minds work.”