Computerworld - We've all seen them -- portable MP3 players, sexy new iPods and "finger-size" drives in varying colors that use the ubiquitous Universal Serial Bus or FireWire port for
connectivity. While they look innocent enough, they nevertheless pose a serious security threat to organizations. In fact, some companies have banned their use outright. Unfortunately, too many others continue to ignore the potential security risks posed by the use of MP3 players, USB flash drives and other, similar high-capacity portable storage devices.
These easily concealed devices -- which employees often bring into the workplace -- can be readily plugged into any USB port, allowing users to quickly and effortlessly download sensitive corporate information. Then that information can all too easily then be taken to the outside world. Even when transgressions are unintentional, security risks abound, since portable storage devices are able to circumvent network perimeter defenses such as firewalls and antivirus products at the mail server and can introduce viruses or other malware.
In a recent Computer Security Institute/FBI Computer Crime and Security Survey, over three quarters of all respondents cited insider abuse of network access as a top security concern for companies. And rightly so, since the survey indicated that disgruntled employees were responsible for most attacks on company networks. More than $70 million was lost by organizations in just one year as a result of theft of proprietary information.
And financial losses aren't the only consideration when it comes to insider abuses. An organization's reputation may be at stake if word gets out that employees have leaked information, especially in fields where client privacy is critical, such as finance or medicine.
Gartner issued a report in July in which it cited portable storage devices as considerable workplace security risks because they may be instrumental in downloading private, proprietary information or for admitting a virus. Pocket-size hard drives that connect using FireWire or a USB hard drive or key-chain drive, disk-based MP3 players (like the iPod), memory sticks, compact flash and other memory media, and digital cameras with media cards were all identified as security threats. Especially dangerous are USB sticks, which can be easily concealed and are capable of storing up to 1GB of data.
Insider threats can lead to the loss, corruption or unavailability of information, resulting in a disruption of service to an organization's clientele. Since fraud, theft and blackmail can be accomplished more easily by insiders, employee-awareness programs and computer security policies are imperative. Restricting access to information that may be altered or misappropriated reduces exposure. An organization may be held liable for
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- The 12 PCI DSS 3.0 requirements addressed by Peer 1 Hosting This handy quick reference outlines the 12 PCI DSS 3.0 requirements, who needs to be compliant and how Alert Logic solutions address the...
- Defense Throughout the Vulnerability Life Cycle This whitepaper provides insight into how to leverage threat and log management technologies to protect your IT assets throughout their vulnerability life cycle.
- Mobile Policy Checklist Here's what to consider when putting together a mobile policy designed to support a highly productive workforce.
- Securing BYOD Mobile computing is becoming so ubiquitous that people no longer bat an eye seeing someone working two devices simultaneously. Individuals and organizations are...
- Live Webcast On-demand webinar: "Mobility Mayhem: Balancing BYOD with Enterprise Security" Check out this on-demand webinar to hear Sophos senior security expert John Shier deep dive into how BYOD impacts your enterprise security strategy...
- Live Webcast Endpoint Backup & Restore: Protect Everyone, Everywhere Arek Sokol from the bleeding-edge IT team at Genentech/Roche explains how he leverages cross-platform enterprise endpoint backup in the public cloud as part...
- Streamline Software Asset Management, Compose a software Management Symphony Keeping track of your organization's software is easy with effective software management solutions from CDW. View the videos in our software solutions channel
- Druva inSync: Endpoint Data Protection & Governance CLICK HERE to watch this video about protecting corporate data on laptops and mobile devices, sponsored by Druva. All Security White Papers | Webcasts