Identity Protection Services

[Chris Green <cmgreen () UAB EDU>]

We've all heard or lived one of the following situations:

 * X records taken;
 * Institution notifies X consumers with what happened letter
 * Institution may or may not include some sort of credit watch service to
help mitigate the effects of the incident.

Has anyone evaluated vendors in this space or written up what to look for?
This is one of those things that you need to setup before an incident but if
you're not being affected by identity theft, it's hard to evaluate the
product.
--
Chris Green
UAB Data Security, 5-0842