Re:Military Bans Disks, Threatens Courts-Martial to Stop New...
by oiuytgyuio on Thursday December 09, 2010 @11:11PM
(#1990566)
After various UK government departments lost just about every USB key some new rules were introduced about how they had to be encrypted.
Naturally this was hidden in a procedures manual several 1000 pages long.
But because the procedure dealt with encryption of classified data - the procedures manual saying how it had to be protected was of course secret! And couldn't be issued to the workers.
Re:Military Bans Disks, Threatens Courts-Martial to Stop New...
by krschultz on Friday December 10, 2010 @08:32AM
(#1991552)
Based on my experience in these kind of places, the IT procedures are a bit more robust than your average company and your scenario wouldn't really happen.
And not being connected to the network would be the only reason you need removable media. If your computer is not connected to the network, it isn't very useful. Barely anything is stored locally, the risk of someone walking off with the harddrive is too high.
Anyone stealing the data, yes. I read the article as saying that people using remobvable media for purposes consistent with their jobs will now be subject to court martial.
Example: A machine is normally connected to the network. It is moved to another location and is not connected to the network yet. Someone using a thumb drive to copy a file from a machine on the network to the unconnected machine is breaking the new directive even if the thumb drive never leaves the office or is erased immediately thereafter.
Just an opinion of a paraphrasing of a leaked memo describing a directive...