Survey: 81% of U.S. firms lost laptops with sensitive data in the past year
Companies are struggling to protect hardware, data
Computerworld - Loss of confidential data -- including intellectual property, business documents, customer data and employee records -- is a pervasive problem among U.S. companies, according to a survey released yesterday by Ponemon Institute LLC and Vontu Inc., a San Francisco-based provider of data loss prevention products.
Eighty-one percent of companies surveyed reported the loss of one or more laptops containing sensitive information during the past 12 months, according to the survey, which queried nearly 500 information security professionals.
One of the main reasons corporate data security breaches occur is because companies don't know where their sensitive or confidential business information resides within the network or enterprise systems, Larry Ponemon, chairman of the Ponemon Institute, said in a statement.
"This lack of knowledge, coupled with insufficient controls over data stores, can pose a serious threat for both business and governmental organizations," Ponemon said. "Moreover, the danger doesn't stop at the network, but includes employees' and contractors' laptop computers and other portable storage devices."
Ponemon, whose research firm is based in Elk Rapids, Mich., is also a columnist for Computerworld.
Other findings of the study include the following:
- Handheld devices and laptops ranked highest among storage devices that posed the greatest risk for sensitive corporate data, followed by Universal Serial Bus memory sticks, desktop systems and shared file servers.
- Sixty-four percent of companies surveyed reported that they have never conducted an inventory of sensitive consumer information.
- Sixty-four percent also reported never having taken an inventory of employee data.
- Eighty-one percent of respondents reported that protecting sensitive "data at rest" is a priority this year, and 89% predicted that it will be a priority next year. The survey defines data at rest as all electronic information found on storage devices within an organization's IT infrastructure.
Asked "How long would it take to determine what actual sensitive data was on a lost or stolen laptop, desktop, file server or mobile device?" the most frequent answer was "never," according to the survey.
More than 53% of respondents believed that their companies would be unable to determine what sensitive or confidential information resided on a USB memory stick if it was lost or stolen. And approximately 49% of respondents said that their companies would be unable to determine what lost data resided on a handheld or comparable mobile device, according to the survey.
"Corporations are clearly struggling with the challenges of identifying and protecting sensitive data, as well as developing successful strategies for securing confidential information stored among the myriad devices that make up today's data networks," said Ponemon. "Our findings point to the shockingly high risk to both business and consumers of undiscovered confidential data, but we believe that the data also serve as a compass to help point organizations toward effective solutions to this vexing problem."
- Radicati: Cloud Business Email - Market Quadrant 2013 Google was named the top cloud business email provider in a recent report by research firm Radicati. Out of 14 key players, Google...
- Tablets in the Enterprise: A Checklist for Successful Deployment How can you enterprise manage and secure tablets in order to protect corporate data while providing access to the information and applications employees...
- Enterprise Mobility: A Checklist for Secure Containerization The advantages and disadvantages of the multiple approaches to containerization. Learn More>>
- Enterprise File Sync & Share Checklist File sync and share has changed the way people work and collaborate in today's tech-savvy world. Gone are the email roadblocks, clunky FTP...
- Live Webcast LIVE EVENT: 5/7, The End of Data Protection As We Know It. Introducing a Next Generation Data Protection Architecture. Traditional backup is going away, but where does this leave end-users?
- LIVE EVENT: 5/7, The End of Data Protection As We Know It. Introducing a Next Generation Data Protection Architecture. Traditional backup is going away, but where does this leave end-users?
- On-demand webinar: "Mobility Mayhem: Balancing BYOD with Enterprise Security" Check out this on-demand webinar to hear Sophos senior security expert John Shier deep dive into how BYOD impacts your enterprise security strategy... All Security White Papers | Webcasts