If you’re an organisation that is making public an internal document, you best make sure that you have deleted or blacked out any personal, confidential or actionable information.
The act of obscuring the sensitive information is known as “redaction”, and – for obvious reasons – needs to be done properly if you care about privacy and avoiding a potentially damaging data leak.
In the old days – before PDFs and Word documents – you might have redacted a document with a thick black marker pen, ensuring that anyone who made a photocopy of the document wouldn’t be able to see the censored words. Things are different with electronic media, of course.
Unfortunately, time and time again we’ve seen sloppy security procedures make it far too easy for unauthorised parties to view information in electronic documents that should have been properly redacted.
The last example which has made…
Read more in my article on the Naked Security website.
Found this article interesting? Follow Graham Cluley on Twitter or Mastodon to read more of the exclusive content we post.
