USB Flash Drive Session Review Checklist

Transcription

USB Flash Drive Session Review Checklist
Forward To ->
Auditor
Personnel Manager
CEO
President
CFO
COO
Controller
General Manager
Other:
USB DRIVES - USE AND MANAGEMENT
Evancom® Acceptable Use Policy (AUP) Seminar Series
Session Review Checklist
These are just some considerations and things to be aware of when establishing policy and procedures for company USB
drive use and management. The actual elements to be adopted depend on your own specific situation and practicality.
Device Based File and Data Protection Available


Write protect (switch).
Device manufacturers security “drive access” software password protection.
File and Document Protection

Password protect documents/files when saved (a feature provided by the specific software package/app
used).
USB Drive Features
Lanyard / Tail Trail

Attach to the USB, not the cap/cover.

Bright colours so they can always be easily spotted and found on any carpet, dimly lit room, service
yards, under desks, or on a cluttered table surface (black and silver is too difficult to notice).
The USB Drive Itself

Simple, sleek, narrow, with lanyard attachment to the USB, not the cap.

No fancy or cute gimmicks or novelty features – you have two narrow USB ports on your computer, the
cute novelty ones like cars, or bulky shapes when inserted into one USB port will often block the other
from being used.

Use a bright colour USB drive if possible to make it easily visible in any environment (office, factory,
warehouse, plant, store, outside yard, garage, car/truck).
Identification


Externally they should be marked first so they can be legally identified as being yours, secondly so that
anyone finding it outside the office can get in touch with the company to return it. [Then you get into a
whole new ball of wax, as to the return, rewards and protection which is covered under another
®
Evancom Executive training session].
Internally they should have a non protected identification file with information to help secure and return
the USB to the rightful owner.
Uniformity

Try to buy all the same style of USB drives for your company data storage [not a company logo(ed)
promotional one] so you can easily identify or distinguish a company information USB drive from one
brought in by someone else.
© 2011-2013 Peter E. Evanetz. All Rights Reserved.
“EVANCOM” is a registered trademark of Peter E. Evanetz.
®
Evancom … “Facilitating Business and Technological Development Since 1986” ™
Internet Specialists Since 1995
www.evancom.com
::
www.WasteGPS.ca
USB Drive Inventory List & Management




There should be a maintained inventory list of all company USB drives and who they are assigned to
with employee signed receipts for using them.
Don’t forget today more than ever employees and contract workers come and go under all
circumstances and so do the USB drives with your company information, and internally developed
documents, formats, templates, contacts and references [This is another ball of wax as to the ownership
protection of information, contacts, links and intellectual property obtained while using the drive which is
covered under another Evancom® AUP Executive training session].
USB sign out / sign in sheets are to everyone’s benefit when both practical and appropriate.
Pre-exit and employee transfer interviews – when contract workers and employees leave the company,
are promoted/demoted, or are transferred to another department - you may lose control of unrecorded
USB drives, information becomes lost, and ends up who knows where, and with who!
Insurance & Legal Claims

Privacy and data management is part of your responsibility.
USB Audits or Reviews*
Doing a review or audit is beneficial to everyone. Often an employee will lose or misplace a USB without
realizing it for a significant period of time – and take even longer to personally accept the fact it is actually
lost, admit to it being lost, or report it - That causes even more problems in trying to backtrack to find out
what was actually lost.



Audits and reviews ensure the recognition of lost and misplaced USB data drives; as well they
recognize misused/abused, and damaged drives.
Audits and reviews provide for recognizing any poor condition of a USB, and allows for its replacement
if required – remember everyone is not a computer expert, nor do they notice or care about computers
and parts. Often if they did, they would not know who to report it to, or if it is worth reporting until it is too
late. In workplace conditions such as outdoors, or industrial plants, the work environment can not only
be tough for employees, but also the USB drives enduring extreme hot, cold, humid, damp, dusty, and
dirty conditions.
If done wisely, the audit or review can be a supporting element in your management and control of USB
drives and information, to quickly recognize any lost, misplaced, or USB drives in bad condition.
Implementation of USB Acceptable Use Policies (AUPs)
External support with the Implantation and training of USB drive management may be a wise thing in many
circumstances. We are dealing with many personal aspects in USB management, with perceived trust,
personal feelings, required education and understandings. The employees/contract workers/managers need
a clear understanding of why the focus is paid on these little things, and why it is to their benefit as well as
the company’s benefit to pay attention even though it is sometimes a pain.
* Implementation & Training Specialist
This article by Peter E. Evanetz expresses only one view or opinion at a given point in time. It is not all encompassing and should not be
relied upon, or regarded as providing an expert opinion for your specific organization. For expert opinions you should consult a specialist(s)
to review your specific situation.
Peter E. Evanetz is a Canadian implementation and training specialist in business technology. He may be able to help you with various
aspects of your organization’s “Acceptable Use Policy (AUP)” design, audits and implementation. He can be reached by telephone at
Evancom® (905) 548-9118.
®
Evancom … “Facilitating Business & Technological Development Since 1986”™
“Internet Support Specialists Since 1995”
Rev. 20131223
© 2011-2013 Peter E. Evanetz. All Rights Reserved.
“EVANCOM” is a registered trademark of Peter E. Evanetz.
®
Evancom … “Facilitating Business and Technological Development Since 1986” ™
Internet Specialists Since 1995
www.evancom.com
::
www.WasteGPS.ca