The AP had a story by Dan Goodin about three hours ago that really encapsulated the day in the identity management space. Yet again identities had been stolen (26.5 million veterans to be exact) because someone simply made a stupid mistake; again, and again, and again.
When will companies begin to curtail on employee’s rights to bring data with them, especially in a world of USB drives, PDAs, and laptops? And when they do, will they be ok with the tremendous loss of productivity?
On that subject, many companies are already taking issues into their own hands by restricting web access, eliminating IM, prohibiting downloads, and more. Do these result in limited productivity? Perhaps, but they certainly result in less than enthused employees.
What’s the right answer…in my opinion companies need to do a better job of protecting large amounts of identities from ever being able to be taken off of the property. With a proper Identity Management (IdM) set up, including provisioning and user access rules this employee would not have been able to take this type of information off of a server and onto his laptop.
Honestly it is not that difficult…and the scary thing is, it is being overlooked at the dawn of ‘Web 2.0′.
0 Responses
Stay in touch with the conversation, subscribe to the RSS feed for comments on this post.