Doors Locked, Windows Wide Open

It’s easy to steal data—just walk away with it. Despite billions spent on IT security, the Ponemon Institute’s National Survey on the Insecurity of Off-Network Security has found that many corporations are failing to address the root cause of more than half of all data breaches: the loss or theft of data-bearing assets. The good news is that remediation of off-network security gaps, though not easy, can be straightforward.

The survey findings should make every CEO/CIO question whether their company security measures have essentially locked the door but left the windows wide open: 30% say the loss of a data-bearing asset would never be detected; 41% do not measure the effectiveness of off-network security procedures; 48% report that they spend less than 5% of their IT security budget on off-network security.  Survey respondents were security professionals for their organizations, yet 39% say they do not regard the management of data-bearing equipment as a critical component to security. So the off-network security gap will not be closing soon.

We’re prepared to evangelize for a better outcome. Redemtech already works closely with its customers to manage the physical security of assets in transition, and the Survey offers additional insight into how security organizations think about these issues—which means we can help change minds in ways that will improve basic security practices. Redemtech already provides its customers with the world's most reliable warranted data destruction and compliance reporting, and we are developing new options for these services to fit the various needs of every conceivable off-network security policy.

Redemtech will be analyzing the results of the Survey and formulating best practice recommendations which we will publish on September 10. It is safe to say that any organization seeking to eliminate the off-network risk of breach must begin with a strong mandate from senior management. Thereafter, implementation of corrective action must be detailed, and will require operational discipline to be effective—the perfect opportunity for out-tasking.