Portable storage threat to corporate data

Portable storage threat to corporate data

By Stuart Finlayson

The increasing popularity of portable storage devices such as USB flash drives and MP3 players poses a significant security headache for companies, exposing corporate systems to viruses and theft of sensitive corporate data.

Devices such as Apple's iPod can hold data as well as music, and with most companies giving their staff free rein to use such devices at work, the potential to infect systems with viruses or download valuable corporate information is very much alive.

"Businesses are increasingly putting themselves at risk by allowing the unauthorised and uncontrolled use of portable storage devices," said Gartner analyst Ruggero Contu in a report on how to tackle the threat.

Contu suggests that companies should "forbid the use of uncontrolled, privately owned devices with corporate PCs. The prohibition should extend to employees and external contractors with direct access to corporate networks."

Contu stopped short of recommending the wholesale ban of such devices.

"Portable storage devices can undoubtedly provide very good practical benefits to a company and its workforce. And, in many cases, it would be unpractical and counterproductive to ban their use outright.

"A controlled approach would be a safer option. This would involve adopting certain security measures in terms of overall organisation (policy) and specific tools (technology)."

Related Article:

Executive ignorance blamed for spread of viruses