Laptop security: Securing corporate data for users on the go

Laptop security: Securing corporate data for users on the go

SearchCIO-Midmarket.com Staff

Midmarket IT managers have a lot to think about when it comes to data protection -- there are more compliance regulations to meet and more consumer devices (including smartphones and netbooks) flooding the corporate space. As the number of data breaches

    Requires Free Membership to View

    Download CIODecisions Ezine FREE with your registration.

    Get essential editorial insights that senior IT executives need to run IT operations effectively and efficiently. Check out past issues then register to get the latest issue.

    Scot Petersen, Editorial Director, SearchCIO-Midmarket

    By submitting your registration information to SearchCIO-MidMarket.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchCIO-MidMarket.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

continues to grow in 2010, so does the level of concern for organizations -- pushing companies to focus on enterprise-wide data protection that encompasses mobile devices and remote workers.

Additional threats and challenges, such as a lost laptop, highlight the need for increased security; but what should an IT manager keep in mind when he's securing corporate laptops and the important data stored on them? Consider the following tips when you're tightening your laptop security strategy:

Educate all users about the importance of laptop security and enforce your policies. Identify risks and spread the word to all users about what's being done and why it's important. One policy that should be in place is guidance for users about what they should do if they lose a company laptop.

Consider full-disk laptop encryption. Midmarket organizations are looking to full-disk encryption on company laptops to ensure they are meeting compliance regulations and state data-breach laws. There are many tools designed for this type of protection that SMBs can take advantage of. Smaller organizations may be able to get by with one of the free open source options, such as TruCrypt. Microsoft BitLocker,available for some Windows Vista and Windows 7 users, offers full-volume encryption; new versions will also encrypt data on removable media, such as USB flash drives.

When you're evaluating vendors and service offerings for full-disk encryption, keep ease of deployment and central management in mind. It's important that a smaller IT shop with many users and limited resources can do the overall installation automatically and in one shot.

Tighten laptop login requirements. Stress the importance of strong passwords, and ensure that password reentry is required for the initial boot, as well as on returning from standby or sleep mode, system hibernation, and screensaver time-outs.

It's important that Windows-based laptops have a standard security configuration, and that all systems automatically download and install security updates.

Be aware of noncompliant machines. Take steps to increase MacBook security by encrypting sensitive data and using antivirus software.

How are you working to ensure laptop security?; email editor@searchcio-midmarket.com.

This was first published in February 2010

Disclaimer: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.