About 18,000 Bank of America
customers got a memo back in May saying their Social Security numbers were on a
laptop stolen out of an employee's car. That same month a laptop was stolen
from a branch of Omega World Travel, containing the credit card info of 80,000
Department of Justice workers. Not to be outdone, Bank of America had another
laptop stolen in August. In November, 161,000 Boeing employees were told that a
laptop containing their Social Security numbers was lifted. In February, Ernst
and Young was hit. In March it was Fidelity. Actually,
at the time this article was being written, Boeing reported that since the last
incident, another laptop was grabbed away from an HR rep at an airport. We're
talking, at least, 14 different companies, three state governmental agencies,
five hospitals and nine colleges and universities.
Of course, these incidents are
just some of the big names and there are many many
more that do not get reported.
Organizations are identified on a regular basis as not having an
adequate company policy, safeguards, and monitoring in place to protect themselves.
For example, there's this
financial services company called Ameriprise. It's an
off-shoot of American Express. Encryption of sensitive data is company policy
at Ameriprise. But when a laptop was stolen from an
employee's car in December, it turned out the data on it was not encrypted —
including the Social Security numbers of about 68,000 financial advisors. This
example points out that even those companies that face the most significant
impacts in terms of financial loss and reputation have yet to implement
protective effective measures.
Two of the most common responses
received by BAI Security in post-audit meetings regarding the lack of mobile
device protection are the cost and ease of deployment. In an effort to identify a reasonable
solution that is lost-cost and easy to implement, BAI Security has researched
and tested the Safeguard© Easy product by Utimaco and
is currently recommending it to its customers.
For more information on how BAI
Security can help your organization identify this and other key security risks
within your organization contact us today.