Endpoint Protection

Listening to the local radio this morning I heard the story that the BBC has been forgetful with its laptops and mobile phones. Apparently, as reported by the Guardian and various other sites following a Freedom of Information request, that the BBC over two years has misplaced 146 laptops, 65 mobile phones and 17 blackberry devices. It is unknown if these devices were lost or stolen but the main complaint seems to be the cost to the tune of about £240,000. Although about 10% has been recovered this should not be the primary concern.

The primary worry should be the data on those laptops - If we assume that they contained 250Gbyte disks and that on average each disk would be 50% full then that means over 18Tbytes of data in total not including the mobile phones and blackberrys. I accept that a lot of the data is applications and internet related stuff but the implication is there. There is no indication if the data was encrypted or if any of the data was personal or in anyway potentially damaging to the organisations or employees. Perhaps a further FOI request should be made to further clarify.

If the BBC is capaable of losing this amount of information then consider all the organisations of similar size losing similar amounts of information to understand the scale of loss.

The case for DLP is clear. Keep those comments coming!!

SC Magazine reports Information security professionals need to develop a plan. Many have no idea that TCG even exists, he says, but this is no longer acceptable. “Since laptops and desktop PCs will come with encryption ‘baked in’, it is incumbent upon IT and SC Magazine reports endpoint management and security teams to create a plan for phasing in systems with self-encrypting drives and to phase out encryption software over time.”