Jose Varghese wrote:
> Building security awareness is the key.
>
> Technology keeps changing - mobile phones with disk drives. These
> technologies are quite handy. I feel it is counterproductive to try and ban
> their usage. Educate the users on the risks and provide them the tools to
> use them securely!
>
I agree on the point that these technologies should not be banned from
the organization, I'm looking at ways to restrict them.

User induction is a good approach, yet we should not forget that typical
users are ignorant as ever. They always try to stick in to the
convenient end of the line, where we expect them to stick to the secure end.

Up to now I realized following things from the discussion,

1. People Carrying Data in removable media....which information might be
at a risk if they lose the media.
- Solution would be Encryption
2. People taking restricted data out of office premises. Information
Leakage.
- Any Solutions for this...?

anything else?

Kosala Atapattu

[ reply ]