Protect What's Precious


This article can also be found in the Premium Editorial Download "Information Security magazine: What's your biggest information security concern?."

Download it now to read this article plus other related content.

"Staff turnover is higher not because of dissatisfaction, but because we use a lot of hourly student staff," he says. "The issues of access control and identity management are critical for us specifically for that reason. I don't think we've done enough in terms of coordinating that among the entire university establishment."

His school is taking steps to strengthen authentication and get away from simple passwords, which Oliver describes as problematic. Plans for a new research facility include using smart cards to log onto thin clients.

    Requires Free Membership to View

But for Quantum's Bartlett, trying to implement internal controls at the company, which has about 50 employees, is easier said than done. Anything that slows down access is a hard sell.

"Because of the friendly environment, it's sometimes hard to get people to willingly put a block between [them] and the information, even if it's in the best interest in the long run," he says.

Plus, while protective measures help, they won't necessarily stop a determined malicious employee, notes Jay Martin, security manager at D&E Communications, a provider of phone, Internet and other services in Pennsylvania. The proliferation of devices like USB keys among a staff of about 500 makes the job of data protection even harder.

"In the end, if you have a trusted user who is planning to leave the company or is disgruntled, you can authenticate all day but it's still hard to prevent them from taking the data from their screen and putting it to some use that wasn't intended," he says.

This was first published in December 2006

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: