Flash Drives and Data Security

Answered by:

Question:

Between the potential for customer files and account trials to walk away and the possible introduction of viruses, I am curious as to what kinds flash drive controls (if any) are being implemented and/or if regulators have started questioning this.

Answer:

You may not allow access to the device, but does the PC prevent use of the device? I haven't seen the questions asked by examiners. I have heard of a test, though. Consults doing penetration testing left flash drives in the employee parking lot. Employees found them and, you guessed it, attached them to their PCs to see what was on them. Did they get some good data, hot pictures, or just a possible virus or Trojan that would compromise their security? The answer was, they got busted and had it not been a test, their systems could have been compromised.

Years ago, I used a flash drive to keep my personal PC synced with my work PC. It allowed a lot of flexibility in working, but in today's environment, it could be a security nightmare.

First published on BankersOnline.com 12/06/10