Hi,

Questions like this often cause me to raise a wry smile as they only raise
half the issue.

Pen drives do indeed have increasing storage capacity - but not as much as
the devices to which they connect and from which they can copy data. So, if
you are worried about leakage through illicit use of pen drives you should
also be worried about leakage of data from the device (probably a PC) to
which they connect, especially if that device is a laptop which may
legitimately be removed from (so called) secure premises and which may then
be very readily 'lost' or 'stolen'. So I guess the steer is clear - if the
information is classified in some way as 'sensitive' then it should be
protected on the main device and that protection should be propagated when
copied from the device. Simple eh?

Cheers,

Mark

----- Original Message -----
From: "Kosala Atapattu" <kosalaa (at) carcumb (dot) com [email concealed]>
To: <bs7799 (at) securityfocus (dot) com [email concealed]>
Sent: Tuesday, June 06, 2006 4:30 AM
Subject: USB pen drive policy

Hi all,

Is there any one use a USB pendrive policy? I was just wondering how to
handle USB pendrives since there capacities are increasing by day and
becoming a potential threat of Information leakage.

At the same time USB pendrive have become some thing we can't get rid
of, there uses overwhelm user productivity in some cases (people take
work home..:)).

Has any one come across similar Policy regarding USB pen drives. Any
comment highly appreciated.

Kosala Atapattu

___________________________________________________________
Try the all-new Yahoo! Mail. "The New Version is radically easier to use" ? The Wall Street Journal
http://uk.docs.yahoo.com/nowyoucan.html

[ reply ]