|
New research reveals that almost half of people would take useful information and data with them to their next job – and it’s unlikely that anyone would stop them, as most companies have no security in place to prevent information going out the door.
A study carried out by internet security specialists Check Point Software Technologies revealed that 85% of employees admitted that they could easily download competitive information and take it with them to their next job, This is despite the fact that 74% of these companies have a policy that specifically states that company personnel are not allowed to take company information out of the office.
The survey into staff and data security was carried out among 200 senior IT professionals, and showed that 81% of people take files from work to use at home, with the majority using USB memory sticks as the preferred method to store data. Some 33% store work data on their USB stick compared to 14% who use a laptop.
The huge demand for people to use USB sticks creates a real security headache for companies. Not only are they difficult to keep tabs on, but they are far easier to lose in transit – making them a likely target for opportunists who may find them very valuable assets to trade with competitors or use to blackmail the company into keeping quiet about losing sensitive data in the first place.
Check Point spokesman Martin Allen said: "USB sticks are now more popular than ever, with everyone from children up to the CEO travelling around with data on them. People can now carry 16 gigabytes [of information] around in their pockets [so] it’s not surprising they can become a serious security risk.
"Companies spend millions on their security and just forget about the fact that millions of pounds worth of valuable data is ‘going walk about’ on people’s keyrings, and a great deal are very happy to download information to take with them to their next job. Without being too draconian our advice is [for businesses] to lock down computers with vital information and make sure they centrally control USB sticks by supplying them to staff with mandatory encryption in place. That way they can freely use them keeping the data safe at all times."
Check Point offers some tips to help companies roll out a mobile security policy and secure vital data:
• Educate staff so they are aware of the security and legal implications of downloading sensitive or competitive information
• Include the management of all mobile devices in your security policy
• Specify that all staff members have to sign your security policy, to ensure that they will not download sensitive or competitive information or take it to their next job – and make sure you have the appropriate software to enforce the policy in place
• If you have sensitive information you do not want downloaded, then block end-points on computers with efficient and cost effective software
• Ensure all USB sticks that are connected are encrypted
• Use encryption software that does not impair the use of the device and make sure that employees cannot by-pass the encryption – it therefore needs to be transparent to the user, quick and easy to use
• Remember security is a two way process – you need to have your staff on your side, so complement sensible, workable policies, with centrally-controlled security technology combined with trust, education and understanding.
|
