Current Filter: Security>>>>>Opinion>

   

In 2015, the world's mobile worker population will reach 1.3 billion, representing 37.2% of the global workforce, an increase from just over 1 billion in 2010*. A mobile workforce has become a prerequisite for corporate growth and productivity, which has led to the mass adoption of mobile technology where workers expect to utilise a range of devices at work.

How to provide easy access, whilst protecting company data when it's on the move, is one of the most pressing issues for IT managers who have the ultimate responsibility to maintain data security. Creating a security-conscious data culture is not easy; it can be a constant battle to educate and motivate employees to maintain data discipline. Here are seven of the 'hygiene' factors that provide a solid foundation for increasingly mobile corporate data.

1. Fit hardware encryption SSD drives on company laptops. This is one of the easiest measures that will provide the highest level of protection when your workforce is on the move. Hardware differs from software encryption in that it remains BIOS independent, which prevents 'backdoor' access and the laptop retains a fast boot-up. The encryption methods are robust and remain impregnable, if a laptop is left in a taxi! I would always recommend a FIPS 140-2 or OPAL compliant drive with AES 256-bit encryption.

2. Storing sensitive data on a 256-bit hardware encrypted USB Flash Drive. This is the second best way to make sure that your data is protected when mobile. Pen drives are a popular method of 'physically' transferring data between executives, but they can be treated as disposable and are easy to lose. A hardware-encrypted USB is a vital step to prevent data loss and is an inexpensive solution. I would recommend a FIPS 140-2 certified drive.

3. Installing a reputable antivirus remains an essential item on the security 'hygiene' list. This is especially an issue when individuals are allowed to use their own devices for work - too many have no effective virus protection. Even in cases where company machines are involved, IT departments must be vigilant to ensure AV packages are not out of date or have not been updated with the latest virus watch-list- or even turned off.

4. Enforcement of strong passwords and authentication. Choosing and using strong passwords remains an important part of keeping data safe. Educate your workforce to use upper case, as well as lower case letters, numbers and special characters. Ask them to avoid names and catchphrases that are in the public zeitgeist. Prompt them to change passwords regularly.

5. Downloading third party software often undermines the data integrity of devices. IT managers need to educate their mobile workforce on the threats associated with the downloading of third party apps. It is necessary to have a prescribed list of acceptable software or to offer alternative applications that continue to allow them to do their job.

6. Ensure laptops are running all the latest operating system security patches and stress the need for patch management. This is often the last thing on users' minds and they ignore prompts to allow updates. It is an essential part of a data security regime to have regular audits of workforce laptops.

7. Have strong and formal user policies. Engage with HR and senior management to implement a strong user policy. Providing users with a clear procedural set of guidelines will allow them to work safely, as well as use their own devices in the workplace. Give users training and engage them on a regular basis.

* International Data Corporation (IDC)