Secure USB Drive

There are currently two key threat vectors:  malware (as shown by the recent Conficker / Downadup worm which spread via USB flash drives).  The second, and most dangerous, is the risk of data loss of theft – another key vector involving thumb drives.

Several recent surveys have reported that enterprises are increasing their security budgets in 2009, to match expected increases in security issues as a result of economic uncertainty.  For example, a Ponemon Institute survey of 950 people who had lost or left their jobs during the last 12 months, found nearly 60% of them took company information, such as customer contacts, when they left.

It’s not hard to see how the data breaches of the last 18 months — lost laptops, USB drives and CDs in the public and private sector — could be overtaken by data theft by former employees made redundant in the downturn.  Where previous breaches have been accidental, they may start to turn deliberate or malicious.

All the more reason to control the use of USB thumb drives, and ensure that company-issued drives can be secured with mandatory encryption and centrally managed.  This enables tracking of data copied to drives, and remote termination of drives if necessary.