* 44% of corporate end users indicate their company does not have a policy that forbids copying corporate data onto a personal USB flash drive.
* End users report the types of data most likely to be copied to a personal flash drive include customer data, financial information, business plans, employee data, marketing plans, intellectual property, and source code. It also included the patients' Medicaid or Medicare numbers, which can indicate their Social Security numbers or those of their spouses. The data stored on the drive is not password-protected or encrypted and includes the patients' names, medical record numbers, billing codes, the facilities where the office visits occurred and other billing information. The drive contains downloaded medical and financial records for 1,200 patients with HIV, AIDS and other medical conditions. It’s Monday morning, and your task is to go to your lead executive to let him know that an ambitious employee who wanted to get some work done over the weekend just reported that her USB flash drive was either lost or stolen from her desk.
What would happen if one of your coworkers lost a USB flash drive containing extremely sensitive customer information? Would it cause panic because of the potential for data exposure and massive fines and costs for restitution? Or would you relax knowing that the data is encrypted, the flash drive is password-protected, and you have the ability to terminate the drive if it's ever used again? If it's the former case, read on to see how to move from "panicked" to "relaxed."
0 kommentar(er)
