Protect desktop data, too

You've got your systems secured, or so you think. You have the best anti-hacking software available to keep the bad guys out, that much is for sure. And yet, like many CIOs, you haven't taken the steps to protect data on desktops, laptops and other portable storage devices.

The number of incidents involving these kinds of devices is growing. Two recent examples include Horizon Blue Cross Blue Shield of New Jersey and Georgetown University. Both faced data compromises that could have been avoided. If you are thinking about saving a few dollars by shaving down the security budget, think again. If you think it's unlikely this could happen on your watch, study these recent thefts.

Horizon notified about 300,000 members of the potential compromise of their personal information following the theft of a laptop containing the data on Jan 5th. Although a security feature on the stolen laptop deleted all of the confidential information on Jan. 23rd, it's unclear whether the thief accessed the data before then. The data on the laptop was not encrypted, but it was password-protected. That sounds like a job half done.

Meanwhile, the CIO at Georgetown University faced a different headache when a computer disk was stolen from a locked room. The disk contained Social Security numbers and other identifiable data for 38,000 current and former students. Ignorance is not bliss for the CIO and other IT executives. A theft is a theft by any terms. And letting your guard down may just be showing criminals the door to get in.

For more on securing it all:
- See this ComputerWorld article