The financial crisis could be more costly than you think.

7:51 am on September 25, 2008 | By Tim Lavelle | In data encryption, information security, risk management |

I have read two recent articles that are troubling: “IT administrators admit they would steal data” and “When Credit Crunch = Data Security Crunch” .Both discuss the likelihood that employees would steal from their employers if they were laid off or otherwise perceived that their loyal service to their organization was not being reciprocated.

Especially in these difficult times, companies and organizations should recognize that it is increasingly risky to rely on their employees to be an integral part of their data security posture. What, you say, are you asking them to do? If you demand that sensitive data not leave the building on laptops, are you sure this is not happening? If you instruct your employees to transport and store their laptops out of sight, are they? And how about protecting their passwords? Does anybody share and/or write down their passwords in your organization? Even if you encrypt the data on a laptop, are you aware that all it takes is the password to decrypt that data?

Do you really want to depend on your users to comply with all of your data security policies if there are technologies available that could effectively remove the user from that equation?

Share/Save/Bookmark

 

No Comments yet »

RSS feed for comments on this post. TrackBack URI

Leave a comment

XHTML: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>