At the best of times, IT will tell you that data security is a challenge. In a recessionary climate that sees a large number of (often disgruntled) employees exiting the firm – they’ll tell you it’s a daunting feat.
As Carter McCrary, Chief Operating Officer of Absolute Software explains, “mobile devices make it fairly easy for data to walk out the door with a former employee.” It is of no surprise then that 59% of employees who lost or left a job in 2008 admitted to taking confidential company data with them [1] (and that’s just those who confessed…).
“With layoffs on the rise,” McCrary continues, “IT security practitioners must unfortunately prepare for the worst.”
Recent, high-profile cases have reminded us of just how damaging ‘the worst’ can be, with ex-employees intentionally leaking millions – and in some instances, even billions – of dollars worth of company data. As the unemployment rate swells, IT teams must undoubtedly redouble their data security efforts; a necessary- yet rigorous- task.
As explained in IT Security’s Critical Role During Layoffs, a July 2009 reportby Forrester Research, Inc., “IT security’s role during layoffs is a difficult one. In addition to performing normal duties of safeguarding the company perimeter, during layoffs it must also deprovision assets, monitor networks for intrusions, and work closely with counterparts in the organization to handle incidents.” [2]
IT must therefore not only consider those actions to be taken once layoffs are announced, but also, those practices that should be in place prior to any dismissals. Outlining a series of such practices, Forrester explains that “the implementation of proactive data protection processes sets the stage for an effective response if and when layoffs must be considered.” [2]
Forrester also recommends that organizations should supplement said “tactical activities by implementing technology like data leak prevention (DLP) and PC back ups to create a sustainable, ongoing data protection program.” [2]
Of the technologies available to protect computers and prevent leaked data, layered security tools help IT to seal those security holes that a determined ex-employee may attempt to exploit. Absolute Software’s Computrace, for example, layers asset tracking, data protection and computer theft recovery capabilities. Prior to and during layoff situations, IT can monitor changes in asset information – such as location, installations, or configuration – and be alerted to suspicious activity.
Should a machine appear to be in a compromising situation – or should an ex-employee simply leave with laptop in hand – IT can utilize the product’s data delete feature to remotely (and permanently) delete data from the target machine.
Absolute also liaises with law enforcement to provide leading computer theft recovery services – helping to deter ex-employees from taking an unauthorized ‘parting gift’. Embedded in the firmware of many HP laptops, Computrace technology is highly resistant to tampering and rapidly deployable.
As the side effects of recession endure, IT must be particularly diligent in keeping company data secure. Tools, policies and practices must converge to develop both a proactive and reactive response to layoff situations – and ensure that data stays in the rightful hands.
For any additional information, please contact your HP sales representative.
For more information
Absolute
IT Security’s Critical Role During Layoffs
[1] Data Loss Risks During Downsizing, Ponemon Institute and Symantec, February 2009
[2] IT Security’s Critical Role During Layoffs, Forrester Research, Inc., July, 2009
