These problems have always been around from the days of floppies. USB drive is another, albeit bigger medium. The same rules/policies still apply. I worked on a project where developers were required to take the laptops home everynight because they were being stolen overnight inside the supposedly secure building! Instead of adressing the internal physical security of stolen laptops, workers were exposed to external personal physical (violent) threats in the form of mugging/robbery of laptops as well as loss of valuable development data. Security can be an oxymoron, if not thought out properly.

A CISSP, CISM, ISO27001

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11397/33929#33929