x



Loading... Please wait...

Blog Author

Jon Collins


Freeform Dynamics
Managing Director/CEO

Jon Collins' blog 03-02-2009 11:29

The security risks of snow

Let it snow, let it snow... until such time as the kids can't get to school and the rest of us start cancelling meetings, at which point people start to get a bit flummoxed. In Britain, and no doubt in other countries, we treat the arrival of snow with slight surprise, as we find out once again that our transport and heating systems are unable to cope with it all.

From a security perspective of course,the moment of truth is when three-quarters of the workforce find themselves working from home. Too late by then for the SSL VPNs, NACs and NAPs,as execs and staff alike hastily copy the few files they were working on, onto a USB stick which then gets plugged into the kids' PC. It's a test, and a pretty good one at that, given that no exec is going to listen to the IT department saying, "don't do it" if it is the only way they're going to get the job done.

What's the answer? We would suggest education - and fast. If there are ways of working that are more secure than others, then people should know. Not least for example, imposing at the very least a thorough antivirus and spyware check of any computer that will be squatted by the snow-bound employee. There are free packages galore, and if an employee has to use their home computer for work use, they could at least install the minimum of protections on it first (and without breaking the licensing restrictions on said free versions).

No doubt IT support will have its work cut out this week. But a simple email sent now, with some sage advice, could well prevent all kinds of headaches later.

 

 



Permalink:
http://www.infosecurityadviser.com/view_message?id=96

Comments:

moamin  17:47 pm, Tue 3rd Feb 2009

It's a case of preparation and education.
Granted, we don't have snow here as much as we use to but when it does arrive things tend to get a bit hectic, the office is empty except the ones who live close by.  It's natural to think 'ooh I'll just pop these files onto the USB key can finish up at home'.  If the correct technical controls are in place and procedures are followed there shouldn't be a problem with that.  However, we are humans and we don't always do what we are told even if we know it's good for us - we forget the awareness sessions, we have deadlines to meet and we make mistakes or in some case we really don't care, because security 'Well that IT's job, I'm a PA, what do I care?' 
Company's are already fire fighting with other security issues and seemingly innocuous things like this get forgotten about, so the USB key is taken home...well we all know what the possibilities are then...

© 2009 Reed Exhibitions | Contact Us | Privacy Policy

Infosecurity Adviser is produced by Reed Exhibitions with thanks to Tangent Labs