Seven steps to securing USB devices

Oct 3, 2006 2:34 PM

Managing portable storage devices is a relatively new threat for corporate security directors, but most have already begun crafting policies governing the use of the gadgets.
The following steps from msystems, Saddle Brook, N.J., will help your enterprise secure personal storage drives, both on and off the network:
1. Always define and publicize your company policy for personal storage devices. Once you decide to take measures prohibiting the use of unauthorized USB devices, make sure you put these policies down in writing and create a plan to integrate them within corporate IT operations. Keep in mind that data can be copied to a wide range of mobile devices, including cameras, modems, network interfaces, printers, smart phones, music players, and thumb drives.
2. Institute company-issued personal storage devices. Although it is not practical to ban the use of personal storage devices, it is perfectly reasonable to limit their use to company-issued devices.
3. Make sure devices are fully encrypted. Because personal storage devices are easily lost or stolen, encryption is imperative. Companies should ensure that 100 percent of the contents on the device are encrypted, so that data security is not left up to the device owner, but is handled automatically by the device.
4. Ensure that users cannot circumvent security measures. Most employees see USB drives as consumer devices similar to their cell phones or cameras, and don't see how critical password protection can be. Your company policies and USB devices should enforce security measures by making the use of passwords mandatory.
5. Maintain an audit trail of data stored on devices. When administrators have complete control over which devices are used and how they are used, they can ensure the confidentiality and security of data.
6. Have the ability to recover data that resides on personal storage devices. Make sure your total solution for USB drives can help you ensure business continuity through seamless device backup and the ability to restore or recreate lost or stolen drives.
7. Make sure your enterprise solution is comprehensive enough to provide you with the ability to store information on secure USB drives, control the use of all removable devices both inside and outside the corporate environment and centrally manage company-issued USB drives.

Want to use this article? Click here for options!
© 2012 Penton Media Inc.

This month in Access Control

• Targeting The Customer
• Electronic Pedigrees
• One Hero Among Many
• Who? What? When? Where? Why?
• More from September's issue