I haven't seen it yet (still trying to find a place that sells the WSJ) but I'm told that I'm quoted on page A20 regarding sensitive information being stored, unprotected, on mobile devices. Check it out if you can.
My contributions to this article were limited but folks you would not believe what I see and hear about...That is sensitive electronic information scattered everywhere across the network - workstations, servers, databases, mobile storage devices - you name it - and it's almost always unprotected. No access controls to prevent unruly employees from doing bad things with it and no access controls to prevent outsiders from doing bad things with it.
I'm not just talking about corporate intellectual property either. I'm talking about healthcare records, SSNs, credit cards, and other personal information...personal information belonging to me and you! This isn't just a business issue - it's a privacy and identity theft issue that affects us personally.
This is backed by story after story, breach after breach, and study after study such as:
Management of Electronic Records Still not Taken Seriously
Privacy Rights Clearinghouse Chronology of Data Breaches
I've written about this subject on other forums that you may want to check out - or forward to those who are responsible for information security, audit, and compliance in your organization...this is a big deal:
Document Security - Protecting sensitive information both inside and outside the firewall
Securing data at rest vs. data in transit
The compliance payoffs for securing vulnerable information at rest
Tools for securing mobile drives
The problem with unstructured information
How to secure laptops in 7 steps




