Creating and Enforcing Effective Mobile Security Policies
Network and Systems Professionals Association

Is Your Company Creating and Implementing Mobile Security? Careers, corporate reputation, and your bottom line are at stake. When implementing policies for mobile data security, it is important to evaluate your specific situation, and put in place the correct balance of flexibility and firmness for ongoing enforcement.

New study shows that most employees still don't know about critical policies - or believe those policies will be enforced
Dark Reading
http://www.darkreading.com/document.asp?doc_id=140131

Companies still failing to enforce security rules
InfoWorld
Guess what?
Creating the most comprehensive and restrictive security policies in the world won't do your company any good if you don't enlist means of enforcing them.
Should this be news?
One might think not, but apparently -- based on a new study published by Ponemon Institute and sponsored by DLP vendor RedCannon -- many companies are failing to implement their existing security rules, or express them in a manner that actually drives users to obey them.

Mobile workers put company data at risk, study says
Network World
Bad practices, weak or no policies, ignorance, lack of enforcement are all problems. Despite highly publicized data breaches, mobile workers still endanger company data with risky behaviors, according to a new survey.

Survey: Security Policies Not Enforced
Processor
Most employees are either unaware of their company’s data security policies or don’t care because there are no consequences, according to a study conducted by the Ponemon Institute for RedCannon Security. About 39% of employees surveyed say they have lost a PDA, cell phone, USB memory stick, or other portable device, with 72% saying they did not immediately report the lost or missing device. About 56% of those surveyed say their employer would never be able to determine the type of data on a lost device. According to the survey, the most common data security violations include copying confidential information onto a USB memory stick, sharing passwords with co-workers, accessing Web-based email from a work computer, and downloading personal software on a company computer.

How Often Do Your Lose Your Laptop?
Softpedia
39 percent of employees have already lost a laptop or another device, survey reveals By: Bogdan Popa, Security and Search Engines Editor This would be a great idea to avoid losing your laptop Enlarge picture The computer security is not all about antiviruses, antispyware technologies or any other software solution being installed on the system. It also refers to users' negligence that often boosts the attacks, data loss or any other leakage concerning private information. According to a research conducted by the Ponemon Institute, 39 percent of the employees included in the questionnaire said they had lost their PDA, their mobile phone or their laptop, all the devices containing private details. What's more impressive is that 51 percent of the IT professionals said they had already copied confidential information onto a USB memory stick, which made the data loss a serious problem in case the device got stolen.

CCH® HR MANAGEMENT
Wolters Kluwer
http://hr.cch.com/news/hrm/010108a.asp

Mobile workers put company data at risk, study says
Computerworld
http://computerworld.co.nz/news.nsf/scrt/830546FC79ADA1F1CC2573AE0010D8B9

Survey of US IT Practitioners Reveals Data Security Policies Not Enforced
First
http://www.first.org/newsroom/globalsecurity/181052.html

Companies are not following simple data security procedures in seven high-risk scenarios, according to new research announced today by the Ponemon Institute, a privacy and information management research firm.

"Portable PC drives security issue for U.S."
United Press International

The growing use of portable computer devices like flash drives is a potential privacy and security nightmare for U.S. government agencies.

"The reports we've seen over the past year (about the theft or compromise of personal data on U.S. government laptops or other computer media) are just the tip of the iceberg," technology executive John Jefferies told United Press International.

"We are expecting a huge number of similar reports over the next 18 months" relating to the use of ever-smaller and more powerful flash drives and other USB-compatible portable media.

Jeffries, whose company, Red Cannon, markets a proprietary technology to protect data in portable devices, said his assessment was based on the increasingly ubiquitous character of the drives and on his knowledge about the experience of the private sector.
more>>

"Secure The Smallest Endpoints": Preventing Data Loss Via Removable Media
Processor Magazine

Securing USB drives and other types of removable media is one of the top priorities for security administrators today. These devices are vulnerable because most removable media don’t have built-in data protection and because they connect so easily to computers connected to corporate networks.

Fortunately, there are technologies and strategies available today that can help your small to medium-sized enterprise mitigate the risks from removable media. Let’s take a look.
more>>

RedCannon Reshapes USB Security with "Alchemy"
Enterprise IT

By Pedro Hernandez

By now, everyone is well aware of the dangers that USB flash drives pose. Those tiny totables now come in capacities large enough to slurp a database or a directory packed with valuable IP or customer info. What's an administrator to do, strip search every employee?

Instead, some flustered admins have been reportedly supergluing their USB ports and disabling USB via tweaks. RedCannon asks, why cut that functionality at all? more>>

"IT-friendly USB fobs could improve...data security and portability"
ComputerWorld

Since end users are probably going to plug USB storage fobs into their PCs so they can take data with them, you might as well get devices that can be managed. more>>

"RedCannon’s KeyPoint : Secure Remote Access to Enterprise Systems"
The Clipper Group


Convenience is the rallying cry of many markets these days. Of course, what defines convenience may vary. For some it is a matter of location, for others a matter of the expanse of inventory (or the precise focus of inventory), or the ease of doing business. Enterprises struggle to meet these demands for convenience, while, at the same time, meeting operational requirements for process efficiency and security. For, while enterprise operations may seem like mere extensions of the e-commerce with which we are all familiar, they have different requirements. The amount of critical data that must be given protection in a shopping transaction is limited. In business, the whole process, and evidence that it took place, must be routinely secured. While a commercial experience, once the seduction of marketing has secured the desire to buy, must be kept simple, business processes often need considerable local functionality to be effective.
...more>>