Advertisement
A Sydney lawyer, his wife and son have stood trial for fraud over an alleged plot to assume ownership of an inner west home, in an unusual case of squatter’s rights meeting the criminal law.
Peter Colquhoun, principal of Rozelle firm Colquhoun & Colquhoun, was charged along with his wife Margaret and son Andrew with dishonestly obtaining the Glebe property by deception.
The rundown property was renovated by Margaret and Andrew after the former owner died, and sold by them in 2022 for $3.67 million.
The trio stood trial this year in the NSW District Court, resulting in Peter being acquitted while Margaret and…
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.