A USB memory stick containing highly sensitive Heathrow security data, including details of the Queen’s route to the airport and her security measures, was found lying in the street over the weekend. IT security experts commented below.
Geoff Webb, Vice President, Product Marketing and Solutions Strategy at Micro Focus:
Richard Stiennon, Chief Strategy Officer at Blancco Technology Group:
Once again, we are reminded that data, even secret data, will find a way out. Every organisation sacrifices security for convenience and transporting collections of documents via USBstick is super convenient. As a matter of fact, many organisations, even the US Department of Defense, segment their networks so there is no easy way to transmit files between secured facilities. Thus, USB thumb drives are turned to and it is no surprise that one of them fell out of someone’s bag.
Fixing this problem is not easy but the requirements are well known. It is a combination of data management, where classification and appropriate access controls are put in place. Of course, encryption plays a big role in protecting data. But controlling how USB devices are used is another aspect. Endpoints should be locked down so that the USB ports are strictly controlled and monitored. Only approved devices should be allowed to be inserted and those should always be encrypted.
Another aspect to worry about when doing a complete data audit is where does the data end up? Are there copies of secret documents all over? Those should be sanitized. A comprehensive data santization policy and plan can address the trillions of gigabytes of so called “dark data” that resides in organizations around the world.”
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.