Privacy Monday – April 28, 2014

For the last Monday in April, we have a few privacy and security bits and bytes to start your week.

Trending Now – 5 Things Every Company's Data Security Program Should Include

JD Supra Perspectives has published a short article (disclosure: quoting this author) that can get people talking this week. Get it here and circulate it.   The 5 things could jump start your own data security program.

Tech Heavy Hitters Fund Open-Source Project

By now, you likely are aware that the Heartbleed bug originated in a coding error in OpenSSL – an open-sourced Secure Socket Layer program.   Open source is good code in most respects, having been contributed to and tested by hundreds of experienced users.   But therein lies the problem as well.   There is no real QA.  Code is contributed and usually uploaded on the fly and bugs are reported by the user community with fixes also contributed.   The Washington Post reported that a group called the Core Infrastructure Initiative