10 Habits That Threaten Your Firm’s Data Security

They’re just old habits. You likely do them without even thinking. But these 10 habits could be making your company vulnerable to hacks and other cyberattacks. (A slideshow version of this story is available here.)

1. Sharing passwords. It may not seem like a big deal to share your password with a coworker that you’re close to, but even if that person is completely trustworthy, someone else may overhear you. You should always keep your passwords completely confidential to ensure that they don’t fall into the wrong hands. 

2. Using identical passwords. More people are guilty of this than would care to admit it, but the fact remains that it’s simply easier to remember one password for all of your accounts. But using an identical password makes it easier to hack every account you have. If you need to, get a password app to keep all your passwords safe, and use a different one for every one of your accounts.

3. Using unsecure Internet. Getting work done at the airport or while you’re sitting at your local Starbucks may seem like a good idea at first, but if you have confidential information on your device, it is a serious data security risk. Public Internet connections make your information accessible to anyone who has the know-how to access it. Only use secure Internet connections to get work done, and save public connections for personal browsing purposes. 

4. Not purging files. Some documents that contain sensitive information eventually become obsolete or outdated. When this occurs, it’s important that you purge the files from your system. The longer these documents are on your computer, the more likely it becomes that they’ll be compromised.

5. Using unencrypted USB drives. It’s quick and easy to grab a USB drive and save some files to it before you leave the office. But it’s important that you ensure that the drive you’re using is encrypted. If you were to lose an unencrypted drive, anyone who found it could access the information you stored. 

6. Not reporting lost equipment. We’re only human, and sometimes we lose things. But when you lose a work-related device — whether it’s a laptop or a USB drive — you may be tempted to keep it quiet to avoid any repercussions. (Or you may just think it’s not that big of a deal.) It’s important that you report any lost devices so that your firm can take measures to protect the data that was contained on those devices. 

7. Leaving computers unattended. When you’re working outside the workplace, you may not even think about stepping away from your laptop for a few moments to grab a coffee or toss something in the garbage. But when it comes to confidential data, you shouldn’t leave your computer unattended for even a moment. It only takes a few seconds for someone to grab your laptop and run, or to copy some information off of your screen. Always keep your laptop within easy reach when in a public area. 

8. Not using privacy screens. Whether you’re at work or working remotely, it’s important that you use privacy screens when working on confidential documents. Any time you step away from your computer, lock it with a privacy screen so that passersby can’t see the information you are working on. Failing to do so is an easy way to compromise clients’ personal data. 

9. Using personal mobile devices. It’s common practice these days to connect your mobile device to the wireless network at work. But if that connection can access private information, it should only be accessed with secure devices. Your smartphone does not have the security necessary to protect your firm’s and your clients’ data and maintain compliance. 

10. Carrying unnecessary info when traveling. When you’re traveling for business, it’s essential that you have access to the files and information that you need. However, you should never have more files than are absolutely necessary for your trip. If your laptop becomes lost or is compromised in some other way, every file on the computer is now at risk; the fewer files stored on the computer, the better. Your best option may be to store them in a secure, encrypted cloud environment, giving you full access to all the documents you need without having to store them directly on your computer. 

Benoy Tamang is the CEO of Lehi, Utah-based eFileCabinet Inc., which provides paperless document management software.

For reprint and licensing requests for this article, click here.
Technology Data security
MORE FROM ACCOUNTING TODAY