Survey: 81% of U.S. firms lost laptops with sensitive data in the past year

Linda Rosencrance   Today’s Top Stories    or  Other Security Stories  

Adapting to New Threats with Integrated Message Management See more Webcasts  " I'm sure no one's surprised to hear that sRead more... " You're fired! It's IT Blogwatch, in which AOL's CTO and others "resign" over its earlier privacy breach...." Read more... Read more Security posts or See all Blogs

August 16, 2006 (Computerworld) -- Loss of confidential data -- including intellectual property, business documents, customer data and employee records -- is a pervasive problem among U.S. companies, according to a survey released yesterday by Ponemon Institute LLC and Vontu Inc., a San Francisco-based provider of data loss prevention products.

Eighty-one percent of companies surveyed reported the loss of one or more laptops containing sensitive information during the past 12 months, according to the survey, which queried nearly 500 information security professionals.

One of the main reasons corporate data security breaches occur is because companies don't know where their sensitive or confidential business information resides within the network or enterprise systems, Larry Ponemon, chairman of the Ponemon Institute, said in a statement.

"This lack of knowledge, coupled with insufficient controls over data stores, can pose a serious threat for both business and governmental organizations," Ponemon said. "Moreover, the danger doesn't stop at the network, but includes employees' and contractors' laptop computers and other portable storage devices."

Ponemon, whose research firm is based in Elk Rapids, Mich., is also a columnist for Computerworld.

Other findings of the study include the following:

• Handheld devices and laptops ranked highest among storage devices that posed the greatest risk for sensitive corporate data, followed by Universal Serial Bus memory sticks, desktop systems and shared file servers.
• Sixty-four percent of companies surveyed reported that they have never conducted an inventory of sensitive consumer information.
• Sixty-four percent also reported never having taken an inventory of employee data.
• Eighty-one percent of respondents reported that protecting sensitive "data at rest" is a priority this year, and 89% predicted that it will be a priority next year. The survey defines data at rest as all electronic information found on storage devices within an organization's IT infrastructure.

Asked "How long would it take to determine what actual sensitive data was on a lost or stolen laptop, desktop, file server or mobile device?" the most frequent answer was "never," according to the survey.

More than 53% of respondents believed that their companies would be unable to determine what sensitive or confidential information resided on a USB memory stick if it was lost or stolen.

Continued...
1 | 2 | NEXT  

Print this Story

Send Us Feedback

E-mail this Story

Order Reprints

Survey: 81% of U.S. firms lost laptops with sensitive data in the past year Missing laptop with data on 540,000 N.Y. state workers found Laptop theft compromises Hotels.com customer data Read More

See your link here

Hands On: Understanding AJAX Paper Trail Flawed in Ohio Election, Study Finds AOL's chief technology officer resigns, sources say More top stories...

USB flash drives get to work Solving real problems with the Network Diagnostic Tool Emerging Appliances Speed Data Analysis

Microsoft Vista Learn more about the next-generation Windows operating system, including expected new features and release dates. Data Security Breaches Find out all you need to know about sensitive information that's been lost, stolen or hacked, as well as best practices for securing critical data. E-voting Get the latest news, analysis and opinions about e-voting. Brush up on the debate about security and reliability as well as challenges to its use. More Continuing Coverage After 9/11: Homeland SecurityAsk a Premier 100 IT LeaderBlackBerry Legal BattleData Security BreachesElectronic VotingFirefoxH-1B VisasHandheld DevicesHurricane Katrina AftermathMicrosoft Legal IssuesMicrosoft's VistaOpen SourceRFID TechnologySCO's Linux FightSarbanes-Oxley ActSpamVoice Over IPWi-FiWindows Meta File VulnerabilityWindows XP Service Pack 2 IT Careers 2010 Four years from now, the IT field will be a vastly different place. Will you be ready? Best Places to Work in IT 2006 Technologists at these choice workplaces earn tiptop pay and perks, and job security is on the rise. Don't miss the list of this year's top IT employers. Premier 100 Our 7th annual awards shine a spotlight on some of the IT community's brightest minds. Find out some of their leadership secrets. More Special Reports 2005 Salary Survey2006 Best Places to Work in IT2006 Computerworld Horizon Awards2006 Premier 100 IT LeadersASPs, Take TwoBest Places to Work in IT 2003Best Places to Work in IT 2004Best Places to Work in IT 2005Business Intelligence: Smarter BIBusiness Intelligence: The Future of BICRM Goes VerticalCRM: Sober CRMCareer Planning Guide 2005Careers: IT Profession 2010Computerworld Horizon Awards 2005Data Management: Mining for GemsData Management: Taming Data ChaosDevelopment: Hard-Workin' Web SitesDevelopment: New Tools New ChoicesDevelopment: The New World of Application DevelopmentDevelopment: The Web Services TsunamiDevelopment: Web Services HurdlesDisaster Recovery: Preparing for the WorstE-commerce Grows UpE-mail/Groupware: Big DecisionsFaces of Mobile ITForecast 2006Hardware: Multiple Cores, Multiple ChallengesHardware: On-Demand Un-HypedHardware: The Shape of Things to ComeIT Management: Guide to Managing VendorsIT Management: Navigating Global ITIT Management: Recovery AheadIT Management: The Future of ITIT Management: The Resourceful Project ManagerInnovative Technology Awards 2004Microsoft in TransitionMobile/Wireless Leaders and LaggardsMobile/Wireless: The Untethered WorkerMobile/Wireless: Tiny Gadgets, Huge CostsNetwork Management: Taking ControlNetworking: Turbulence Ahead!Networking: VoIP Goes MainstreamOperating Systems: In the Slow LaneOperating Systems: Linux Goes GlobalOperating Systems: Should You Nix Unix?Outsourcing: Offshore Buyer's GuideOutsourcing: Outsourcing DangersPremier 100 IT Leaders 2004 Best in ClassPremier 100 IT Leaders 2005 Best in ClassROI: Do the Math!Salary Survey 2003Salary Survey 2004Security Action PlanSecurity: Compliance HeadachesSecurity: Proactive SecuritySecurity: Risk and RewardSecurity: Tips From Security ProsSouped-up SecurityStorage: Battling ComplexityStorage: Cheap & Secure Data StoresStorage: Stretching Your Storage DollarsStorage: The New Rules of StorageSupply Chain: Missing LinksSupply Chain: RFID Reality CheckThe Business of SecurityWireless: Wireless At Work The Enterprise Server Zone Sponsored by Microsoft Windows Server System helps you keep the business running while lowering the complexity and cost of managing your server infrastructure. Simply put, Windows Server System helps you do more with less.  Learn more in the Microsoft Enterprise Server Zone. All Zones Color in the Workplace Enterprise Server ProCurve Networking Sun Enterprise Solutions Storage Solutions Windows Protection

Computerworld Executive Briefing: End-to-End Storage Security Download the Computerworld Executive Briefing free, a $195 value, compliments of Sharp. Download this executive briefing  Adapting to New Threats with Integrated Message Management Adapting to New Threats with Integrated Message Management Register for this on demand webcast now! Go to the webcast  Too Much Portal, Not Enough Strategy Download this whitepaper. First-generation corporate portals were difficult to implement, leading to questionable economic return and unmet expectations. This Forrester whitepaper shows how to develop an upfront portal strategy that focuses on high-value opportunities, helping organizations avoid the painful lessons of the past and open up new potential revenue streams. For access to this portal strategy primer, visit the Portal Solutions Resource Center. Download this white paper  White Papers Read up on the latest ideas and technologies from companies that sell hardware, software and services. EMC's CLARiiON CX3 UltraScale Series Delivers Breakthrough Storage Architecture Business Search vs. Consumer Search: Five Differences Your Company Can't Afford to Ignore IDC Report: Trend Micro: Gateway Antivirus Leader Tackles Spyware with a Unique Multilayered Approach View more whitepapers

• Hands On: Understanding AJAX
• Paper Trail Flawed in Ohio Election, Study Finds
• AOL's chief technology officer resigns, sources say
• More top stories 

Computerworld Executive Briefing: The Security Imperative Overseeing security in an enterprise IT environment requires not only technical expertise, but also a host of management skills. This report has dozens of useful security tips relating to these technical and management challenges, ranging from implementing Web services security to selling security to the CFO. Download this Computerworld Executive Briefing (a $195 value) for free for a limited time. Download this Executive Briefing now! See All Executive Briefings

Adapting to New Threats with Integrated Message Management Every e-mail, IM, VoIP call and download to a mobile device exposes your company to message-borne viruses, spam and other attacks. Learn how an integrated message management approach can help protect your company in the message borne threat environment that we live in. Register for this webcast now! See more Webcasts