signed a confidentiality agreement because the damage is already done.

Sensible employers who wish to prevent data downloads

ISO 27001 calls for controls to be implemented on removable media to stop unauthorised access and transmission of data. It is not unknown for a disgruntled employee to download data containing commercial information onto some form of portable memory device just before leaving employment. This can be sensitive information such as customer information, product information, designs or drawings.

The compromise of these documents can be very damaging for the employer. It does not matter that the employee has signed a confidentiality agreement because the damage is already done.

Sensible employers who wish to prevent data downloads

ot unknown for a disgruntled employee to download data containing commercial information onto some form of portable memory device just before leaving employment. This can be sensitive information such as customer information, product information, designs or drawings.

The compromise of these documents can be very damaging for the employer. It does not matter that the employee has signed a confidentiality agreement because the damage is already done.

Sensible employers who wish to prevent data downloads

just before leaving employment. This can be sensitive information such as customer information, product information, designs or drawings.

The compromise of these documents can be very damaging for the employer. It does not matter that the employee has signed a confidentiality agreement because the damage is already done.

Sensible employers who wish to prevent data downloads

rawings.

The compromise of these documents can be very damaging for the employer. It does not matter that the employee has signed a confidentiality agreement because the damage is already done.

Sensible employers who wish to prevent data downloads

signed a confidentiality agreement because the damage is already done.

Sensible employers who wish to prevent data downloads can stop any transfer of data from a USB port or other device by incorporating this into the Computer Group Policy, installed from the network during boot up, thus disabling the USB port for this purpose; the port can still be used for necessary functions, such as a keyboard or a mouse.

A less effective method would be to have a 'No USB memory stick' condition in the Employee's terms and conditions, but this does need to be policed on a regular basis.

I am constantly surprised that companies that are