Data should be handled with more care

Aug 23, 2007 07:54 GMT  ·  By

Lots of security measures have been installed these days by IT experts to protect their networks from hacker attacks, but it seems that many of them have missed the issue that computers might be insecure even while yanked out of the networks. I've read about a survey, on NetworkWorld, and I found out that 62% (of the IT experts that were questioned) have stated that their companies have data-risk problems which the Ponemon Institute had described as "an abundance of unprotected sensitive or confidential information residing on off-network data-bearing assets."

Now, the fact that a computer is off the network does not mean data is safe. For example, I've seen networks in which the server had various defensive softwares installed. The server filters all traffic, and no computer can send or receive any packets without all going through the server's filters. It also scans files that are copied on to the hard disks. Well, there is nothing to be too worried about, but some network admins say that this security measure is enough (wrong!) and do not install anti-virus software on every station, in order not to encumber them. I'm not saying this is inefficient, but suppose one unplugs the PC from the network, he or she should not forget that viruses and other malware are not found only on the Internet, but on CDs and DVDs as well.

Anyway, as I've said before, I think that everyone that works with important data should first be taken to "IT Boot Camp". Security is bound to get better if people are better instructed. Some employees are simply not aware of the threats. If malware could get on a computer while it's off the network and infect other computers when being plugged in, without the admins doing anything, this could cause huge damage to the company.