USB flash drives: small device, major headache?

ENISA - the European Network and Information Security Agency - has recently published a report which highlights the potential misuse of USB flash drives to breach security of corporate data or introduce malicious code.

The report gives a brief outline of the corporate data which is susceptible to security breaches and incidents, and highlights potential risks associated with the innocent use of USB flash drives by employees of enterprises and also other less legitimate purposes such as smuggling information out of the company.

It lists good practice guidelines which aim at helping readers to overcome obstacles within their organisations. The first step is to set clear security policies and make employees aware of them.

Who should read this report?

The target audience is IT staff, in particular IT managers and professionals, to ensure the ability to secure information on the network as well as the opportunity to manage data which enter and leave the company via these mobile devices. It also targets corporate end-users in general, to raise awareness of the risks related to the use of USB flash drives.

About ENISA

The European Network and Information Security Agency is an EU agency created to advance the functioning of the internal market. ENISA is a centre of excellence for the European Member States and European institutions in network and information security, giving advice and recommendations and acting as a switchboard of information for good practices. Moreover, the agency facilitates contacts between the European institutions, the Member States and private business and industry actors.