Laptop SecurityCompuTRACKS

How Bad Is It?

• 100 Laptops lost each day in the U.S

• 16,000 lost each week in U.S., Europe & U.A.E.– 1 in 10 Laptops

• 33% recovered

• Ponemon Institute 2009

How Bad Is It?

• ½ Business Travelers Report their Laptop has Sensitive Data

• 73% of Corporations had a Data Breach Over a 2 year Period

• Ponemon Institute 2009

→ FactsOrganizations’ main reason for not issuing laptop lock — perceived lack of need.  

Employees main reason for not using a laptop lock — forgetfulness

Less than half of laptop locks are used correctly

Cost of a Data Breach

• $202 per data record breached • 285 million records breached in 2009

– (Verizon Business Report)• Calculator anyone?

– $57,570,000,000,000• Or $365,000 per incident for each company

– (Axcess Report)

• Only reported breaches– 43% who experienced a loss don’t report them

→ Fact

10.5% of theft is suspected to originate from within the workplace   

Data Costs

• Average cost of a lost laptop is $49,246– (Ponemon Institute, 2009)

– 80% of the cost is in the data• If the data is of high value the cost may more

than double up to $250,000.• Reactive Costs• Security Costs

→ Facts

On average it takes more than 9 days to replace a laptop 

Organizations underestimate the cost of downtime by 31%

Information Security LevésSecurity Level Description Explanation

Low Moderately Serious Noticeable impact

Moderate Very Serious Severe Impairment

High Catastrophic Complete loss of capability

→ Facts

Well implemented security policies reduce laptop theft by 43%   

58% of laptops are stolen from the office and 85% of IT managers suspect internal theft

Security levels by Information

Information Category Explanation/Examples Security Level

Intelligence, Investigation related to security

Investigative Information for law enforcement. Confidential, Operational

High

Mission Critical Critical to an agency – vital statistics, emergencies

High

Life-Critical Critical to life support High

Personal Information Personnel, medical, covered under Privacy Act

Moderate

Financial, Proprietary Trade secrets, financial Moderate

Public Information Public Consumption Low

System Configuration IT Networks Moderate

Scientific, New Technology Prohibited to foreign disclosure

Moderate

What Can Be Done

• Don’t Be Stupid!• Strong Passwords

– BIOS• Basic input/• Output system

What Can Be Done?

• Strong Windows Password– May be the same as the BIOS password

• Virus & Malware Protection• Cloud Data Storage & Backup solutions• Internet

– Stay Away• Questionable sites• Game Sites

What Can Be Done?

• Backup Your Data!!!!!!!• Routine

– At Least Weekly– Locally to USB External Device (or 2)

• Carbonite - $55.00 per year• Search PC Mag.com for best backup

• Lojack, GPS Navigator• Remote Self-Destruct

Wishing is Too Late