Portable Problems

A recent survey found "Security Policies Neglect Off-Network Devices". That's enterprise speak for portable devices like laptops, PDAs, and USB-attached storage (thumb drives). This means big companies don't have the resources or inclination to effectively secure devices carried out of the building every day in briefcases and pockets. If big companies can't secure these, what chance do smaller companies have?

The survey reported nearly three of four enterprises experienced the loss (or theft) of a "data-bearing asset" in the last two years. I would put that number at more like 100 percent of large companies. Go to the lost and found of a major airport or cab company, and you'll be amazed at the number of expensive devices left behind every day.

When you carry data around that's not secured, such as full disk encryption on laptops, PDAs, and even USB thumb drives, you take great risks. At least some vendors now include encryption and passwords on their USB drives now (such as SanDisk), and the cost isn't too horrible. Since an entire generation of students now consider a USB thumb drive the data transport option of choice all through high school and college, get ready for them to bring that attitude to the workplace as well.

Smaller companies tend to be more careful, if for no other reason than they have fewer idiot vice presidents leaving their laptops at airport security screening stations. When a small company loses a laptop, it costs them money. When a vice president loses one, a quick call to tech support magically produces a new one. If you do have to replace lost devices, at least make sure you're not worried about the data on those devices being easy to read, steal, and use against you.

• SMB
• encryption
• SanDisk
• security
• thumb drives