USB thumb drives are very convenient. It was only about ten years ago that 3.5″ floppy disks that could only hold 1.44 megabytes of data were the norm. It was revolutionary when Iomega introduced the Zip disk that could hold 100 megabytes in the same amount of space. A lot changes in a decade.
Now there are flash drives the size of your thumb that can hold 128 gigabytes of information. That is the equivalent of more than 90,000 3.5″ floppy disks and it fits nicely in your pocket, or attached to a key chain. The same features that make them useful and convenient, though, also make them easy to lose or steal and make them a significant risk to data security.
In Canada recently a USB thumb drive containing personal information such as name, address, phone number, date of birth, health card number, doctor’s name and other health information for over 83,000 patients was lost. Companies and organizations need to realize the risk posed by storing gigabytes of sensitive, unencrypted data on a device the size of your thumb.
Policies should be defined and enforced to provide guidance regarding what data is allowed to be stored on portable media like USB thumb drives. Zecurion’s Zlock can provide the tools necessary to enforce that policy–providing controls to restrict access to external devices, including printers. For data that is allowed to be stored on USB flash drives, Zlock can create a shadow copy providing an audit trail detailing the data that was transferred.
Additionally, organizations should use secure USB flash drives like Ironkey or SafeStick, and/or protect the data using tools like Microsoft’s BitLocker-to-Go encryption to ensure that any data contained on the drive is protected even if the device is lost or stolen.
Tags: BitLocker-to-Go, encryption, health data, thumb drive, USB, Zecurion, Zlock
Social comments and analytics for this post…
This post was mentioned on Twitter by zecurion: New blog post: So Much Data, So Easy to Lose http://www.zecurion.com/server-software-blog/2009/12/so-much-data-so-easy-to-lose/…
Yes definitely a huge risk! I’ve certainly lost a few USB sticks myself and luckily am not in a super confidential line of work… I’d be in bad shape for that.
There’s a startup company in Scotland with a new solution to this problem which you may be interested in – you attach a Bluetooth tag to the USB stick (like on a key ring) and it pairs will your cell phone. Then if the USB stick gets left behind in a computer or on a table, an alarm goes off to alert you before it’s too late. Also works to protect your cell phone, which I think was their original intention.
The company is TenBu Technologies Ltd and the new product is “nio” – you can see what I’m talking about at http://www.bluenio.com, or it’s on Amazon too.
Hope that helps, could be interesting to use that on top of the encryption…?