Do You Need LoJack for Laptops?
Maybe you’ve seen this disappearing act. If you’re an enterprise that leases notebook PCs, about 15 percent of your machines may “drift” away over the course of two years, never to be returned to IT. Did that make you wrinkle your brow? It should have. A certain number of mobile assets have always been lost, yet it’s been a loss that many enterprises chose to eat. That is, before data breach laws put a whole new spin on this equation. Now notebook drift can equal serious legal and financial pain when the data on those machines also vanishes. As Absolute Software CEO John Livingston puts it “Only because of the data breach laws has anyone started to care.”
What’s the right answer to notebook drift for your enterprise? That’s a question you should be asking now, if you haven't already.
His company compares its Computrace notebook-locating services to “LoJack for Laptops.” Absolute has struck deals with the major notebook vendors (Dell, Lenovo, Gateway, HP and others) to embed its firmware in each machine’s BIOS. In other words, the capability sits there in many notebooks today, ready to be turned on, if an enterprise customer activates the service (via their notebook vendor, for $125 for 3 years before volume discounting.)
How does the technology work? After a customer calls to report a missing notebook, the company’s servers wait for the lost machine to go online. When it does, the company uses IP addresses to locate the lost notebook. It contacts ISPs to get billing addresses for the corresponding IP addresses, gets subpoenas if necessary, and works with local law enforcement to physically recover the machines. That’s not a foolproof method, since many consumer IP addresses are variable every time someone goes online. Also, people can use Internet cafes or wireless connections. Still, Livingston says they have about a 75% success rate physically recovering the machines. (The company’s service is active on more than one million notebooks today, about 43% of which belong to corporate customers. The company also sells to the consumer, education and government markets.)
For most CIOs, though, the key worry is not getting the machine back. It’s proving the data on the machine didn’t go anywhere.
Thus, a second component of the service lets an enterprise customer remotely trigger a wipe of the lost machine’s hard drive, when the machine goes online. The customer does this using an RSA security token: He also gets a snapshot of the machine’s file system and an audit trail as to whether the machine’s sensitive files were accessed, before doing a wipe. (According to Computrace, it’s a Department of Defense grade wipe.)
This brings us to the question I always ask when government agency or corporate notebooks disappear, then make the news: Why aren’t more of these machines encrypted in the first place? To date, some enterprises have viewed encryption as too much of a management hassle, though I suspect with every high-profile data loss, that view becomes more outdated. (For more on how your peers are making mobile encryption manageable, see “How to Protect Your Mobile Data” in our sister publication, CSO.)
If you do encrypt, do you still need some remote wipe capability? When you encrypt, some problems remain. An employee who has just left, or is about to leave, the company may need to have his hard drive wiped, pronto.
So, what are you doing new this year to protect and track your enterprise’s notebooks? How many of your notebooks “drift” away? Let’s talk about what’s working for you and your peers -- before you have to talk with your CEO, or your city’s newspaper.
Previous Post: Rollable Displays: Sci-Fi No MoreNext Post: Will the Phone Company Run Your Data Center?
Most Discussed Posts
Cloud computing has emerged as one of the most significant game changers to hit the technology landscape in the past 20 years. With this massive expansion of the cloud, the perception of the IT organization is shifting from a utility player to a change agent. This eBook breaks down five ways progressive organizations are using cloud-based IT Management solutions to help drive innovation and become more strategic, including: adding visibility and analytics, speeding up time-to-value, lowering costs, improving prioritization, and providing a blueprint for future cloud deployments.
Read the white paper to see how IBM helped Citigroup deliver new services and enhancements to their 200 million customers faster.
There are 3 ways to modernize legacy applications: rewrite completely, acquire packaged solutions or migrate existing code. This paper explains why it's best to migrate and how IBM® Rational® software can help.
Accommodating specific lines of business can result in a hybrid ecosystem of applications and servers. The resulting complexity of this architecture makes for an environment that is costly to maintain and difficult to change when addressing new challenges.
This whitepaper will help you to define a mobile device passcode policy. Security managers must attempt to reconcile two opposing goals. They must: 1) create a passcode policy that is strong enough to protect the device if it is lost or stolen, while: 2) not annoying users with needless length or complexity.
This whitepaper, authored by The Radicati Group, looks at the key reasons organizations should consider moving to a cloud-based archiving solution. Email archiving solutions enable organizations to store, monitor, and collect electronic data exchanged by their users to comply with internal policies and regulations.
ATERNITY will showcase a 30-minute demo on how Fortune 500 companies are leveraging its award-winning FPI Platform to deliver a user-centric approach to Proactive IT Management.
For businesses to move forward and tap into the ever-expanding universe of Internet users and network-enabled devices, it's critical to learn how to make the transition to IPv6. Learn the critical steps your organization must take to make a seamless transition-and keep your business world connected.
Learn how IT teams can protect against spear phishing tactics. Harry Sverdlove, chief technology officer of Bit9 offers a frank discussion about spear phishing - the most common technique used in today's advanced attacks.
Learn how to build a solid business case for your migration to Red Hat Enterprise Linux so you can run leaner, innovate faster, be more flexible and own the New Now.
Social media isn't about you; it's about everything around you. As you consider how your customers want to communicate with you, social media is something that can't be ignored. But what should your strategy be? Is social media "just another channel?" What kind of a plan makes sense for your contact center and for your customers? Join our experts as they share their insight and research results.
Hardware tokens were a popular method of strong authentication in past years but the cumbersome provisioning and distribution tasks, high support requirements and replacement costs have limited their growth. The additional log-in steps that hardware tokens require and the resulting user frustrations have limited adoption and make them impractical for larger scale partner and customer applications.
Sponsored Links
