Issues

The Threat from Unprotected PCs and Networks.

---

The not-so-quiet revolution that has brought about the ‘iPod Generation’ also brings with it a new and widespread threat – including Mass Data Theft via a data-highway that is faster than the Internet and has been completely unprotected. This comes via iPods, smart-phones, pendrives and a plethora of other removable devices, increasingly from people inside as well as outside. The biggest threat to many organisations today, large and small, yet has been almost entirely neglected - until now! The DTI's Information Security Breaches Survey 2006 has clearly identified this emerging threat.

Businesses, schools and colleges and other organisations are all increasingly at risk not just from data theft, malware and other dangerous content but also from lawsuits for breach of copyright and the data protection act – with directors and governors increasingly held personally liable.

Gartner Research has said: "Organisations are increasingly putting themselves at risk by allowing the unauthorized and uncontrolled use of portable storage devices". “These are ideal for anyone intending to steal sensitive and valuable data. Employees may also be responsible for losing data if they inadvertently mislay these devices. The impact of this goes beyond the commercial value of the data."


Key points to consider:

• Be aware of the threats and plan an appropriate and proportionate response
• Consider threats from insider as well as outside
• Consider conducting a security risk assessment
• Ensure you have an appropriate AUP (acceptable use policy) in place and that all staff are aware of it and agree it.
• Ensure that it also covers the use of removable devices - as well as Internet and Email use etc
• Consider adopting appropriate technology to monitor and control use of devices and data - such as this