Hardware

388 council-owned laptops lost

November 17th, 2013

The loss of hundreds of council laptops potentially containing council taxpayers’ confidential information has been termed as ‘not a big security breach’.

The Observer exclusively reported an Interim Progress report from the Royal Borough’s internal Audit and Investigation Unit revealed 388 council-owned laptops were unaccounted for in a survey of council IT assets.

The missing laptops range from devices owned and used in council-maintained schools to assets kept in council buildings.

The report, which outlines risks arising from procedures and policies and any countermeasures being taken, was scrutinized at an audit and performance review panel meeting at the Town Hall, in St Ives Road, Maidenhead, on Thursday last week.

Councilor Duncan McBride, chairman of the panel, said: “I think this has come up before. It is not the first time it has come before us. It is clear from the previous meeting that this is not a major security breach.

“It is terrible that we might have lost these things but… I do not think it is a big security breach.”

However, Councilor Simon Dudley, deputy leader of the council, said: “I’m concerned about these figures, I mean you can see the headlines about the council losing 388 laptops and potentially important information being on them. I would want security processes clearly written down for staff.”

Questioning how many laptops had gone missing in the past year, Liberal Democrat Councilor George Fussey, said: “If we are losing laptops quite regularly, that would be a huge issue. It would be useful to know if we are still losing them or if this is 388 over five years or something.”

Catherine Hickman, head of audit and investigation at the Royal Borough and report author, said the missing laptops date back to 2005 and only a handful, most likely in single figures, had been lost in the 2012/13 financial year.

Mrs. Hickman added; “It could be for a variety of reasons. They may not have been stolen, they could be left in cupboards and forgotten about. We are trying to assess this.”

Councilor McBride added the fact the lost computers may have been older than five years would negate the importance of the lost information and steps have since been taken to reduce the chance of laptops with confidential information on them going missing.

However, speaking after the meeting, councilor John Fido said: “That represents a quite lackadaisical attitude. 388 laptops missing not only represents an awful lot of taxpayers’ money – you would expect a couple of hundred of pounds for each laptop – but also the information on them it puts at risk. These matters have to be treated respectfully.

Get your personal as well as office laptops encrypted by Alertsec

Unencrypted laptops present a major risk of data loss. 80% of information theft is due to lost or stolen laptops and other equipment. About 50% of network intrusions are performed with credentials gathered from lost or stolen devices. The penalties for a data breach are severe not only in terms of the monetary fines imposed on the organization, but also the potential loss of trust from customers and suppliers. Encryption software greatly enhances the security of your organization’s data as the information is not compromised if a laptop is lost or stolen.

Alertsec Xpress is the full disk encryption service that delivers a mobile data protection system for all information stored on laptops used throughout your organization.

Enhanced by Zemanta