The use of laptops has become more widespread within businesses as they give employees the ability to continue working when commuting to meetings and working from home. A vast range of security measures have been implemented to help secure data stored on laptops such as password protection and data encryption. However, by implementing such policies, is the overall security of the data actually increased?
By password protecting laptops and encrypting the data stored therein it is much more likely that the data will remain in a secure state if the laptop is stolen or lost. Despite this, the overall security isn’t necessarily improved. If the owner of the laptop is fully aware of the security measures that are in place they may store more confidential or sensitive data on the laptop than strictly required. This may lead to more data than before being put at unnecessary risk because the security measures could still be rendered useless if the laptop is left unattended and unlocked or if the owner is seen typing in their password.
A further security measure that can be implemented is to use a security device which generates a new code every few seconds. This mitigates the threat of the password being disclosed which can easily happen such as if they see the owner typing the password in from across the room. By utilising such a method, the security of the laptop is increased but the overall security isn’t if the owner hasn’t been appropriately educated. If the owner of the laptop hasn’t been educated, will they know that they will have to keep the security device on their person and not just lying around? Another factor to consider is that if they are dealing with sensitive or confidential data, why are they working in a public area where people can look over their shoulder etc. when there are private booths available. Yet again, this comes down to educating the owner of the laptop and ensuring that they know all the options available to them and the best practice procedures.
The best way to improve the overall security of laptops is to educate each owner about security as well as implementing adequate security measures for the laptop itself. This will ensure that simple mistakes made by the laptop owner that could render the security measures useless are avoided whilst also reducing the potential embarrassment of stolen data should those measures be circumvented. With appropriate education, the owner will understand the importance of keeping minimal confidential or sensitive data on the laptop and only when absolutely required. A better understanding of the importance of keeping the laptop in a secure place when at home and keeping it out of view if it has been left in a vehicle can go a long way in reducing the likelihood of an opportunistic theft taking place.
