How to Lose Customers with Excessive Security
-
@scottalanmiller said:
@thanksaj you can block USB just as easy as blocking cloud storage. Start by blocking USB, not cloud.
Yeah, but if someone has a legitimate need for USB devices at times, then that can be bad. Granted, that's a niche situation, especially in the age of digital delivery and sneakernet is not as prevalent anymore (thought still used some), it shouldn't be as common.
-
@thanksaj said:
@scottalanmiller said:
@thanksaj you can block USB just as easy as blocking cloud storage. Start by blocking USB, not cloud.
Yeah, but if someone has a legitimate need for USB devices at times, then that can be bad. Granted, that's a niche situation, especially in the age of digital delivery and sneakernet is not as prevalent anymore (thought still used some), it shouldn't be as common.
Block USB storage, not USB completely.
-
@scottalanmiller said:
@thanksaj said:
@scottalanmiller said:
@thanksaj you can block USB just as easy as blocking cloud storage. Start by blocking USB, not cloud.
Yeah, but if someone has a legitimate need for USB devices at times, then that can be bad. Granted, that's a niche situation, especially in the age of digital delivery and sneakernet is not as prevalent anymore (thought still used some), it shouldn't be as common.
Block USB storage, not USB completely.
Like I said, there are times that there might be a legitimate need for someone to access a USB storage device. Telling people that copying work files to a USB drive to work from a non-work computer or any other desired policies is an HR issue, not an IT one.
-
@thanksaj said:
Like I said, there are times that there might be a legitimate need for someone to access a USB storage device. Telling people that copying work files to a USB drive to work from a non-work computer or any other desired policies is an HR issue, not an IT one.
So you think it is okay to blanket block cloud storage but not USB? That makes no sense. There is far more likely to be a legitimate need to access cloud storage than USB storage. And it is far less risky to do cloud than USB. Few things are as risky as USB.
Why would you give one the benefit of the doubt and not the other? Why do you feel one is an IT issue and the other an HR issue? Both are equally HR concerns tied to IT capabilities to block.
However, one is modern and sensible to use much of the time. The other is not. One can have corporate controls on it, the other reasonably cannot.
-
@scottalanmiller said:
@thanksaj said:
Like I said, there are times that there might be a legitimate need for someone to access a USB storage device. Telling people that copying work files to a USB drive to work from a non-work computer or any other desired policies is an HR issue, not an IT one.
So you think it is okay to blanket block cloud storage but not USB? That makes no sense. There is far more likely to be a legitimate need to access cloud storage than USB storage. And it is far less risky to do cloud than USB. Few things are as risky as USB.
Why would you give one the benefit of the doubt and not the other? Why do you feel one is an IT issue and the other an HR issue? Both are equally HR concerns tied to IT capabilities to block.
However, one is modern and sensible to use much of the time. The other is not. One can have corporate controls on it, the other reasonably cannot.
USB still has its uses, although the age of flash drives and sneakernet is nearing its final end.
-
@thanksaj said:
USB still has its uses, although the age of flash drives and sneakernet is nearing its final end.
"Still has its uses" is a handy excuse. But this isn't about if something "has a use", it's that you are out of hand accepting blocking anything modern without considering that it has its uses while not accepting blocking of a less useful, more risky, legacy storage mode whose use is likely less than 1% that of cloud storage.
Regardless of it either has any use, your acceptance of the one and willingness to block the other don't match. Why is the one that makes less sense okay and the one that makes more sense not okay?
-
@scottalanmiller said:
@thanksaj said:
USB still has its uses, although the age of flash drives and sneakernet is nearing its final end.
"Still has its uses" is a handy excuse. But this isn't about if something "has a use", it's that you are out of hand accepting blocking anything modern without considering that it has its uses while not accepting blocking of a less useful, more risky, legacy storage mode whose use is likely less than 1% that of cloud storage.
Regardless of it either has any use, your acceptance of the one and willingness to block the other don't match. Why is the one that makes less sense okay and the one that makes more sense not okay?
The fact is that the answer of totally blocking both is likely not the best answer. Some things are still given to people via USB because of the size of the file(s). If you have a 64GB flash drive, and have 50GB of data, it's a lot quicker to give it to someone via a flash drive than via a download from any cloud storage provider.
Having an HR policy that makes sense for your organization and then having IT put the necessary blocks in effect to assist in enforcing it is the best policy. It's not that there is any one master right or wrong answer. It would vary company to company.
-
@thanksaj said:
The fact is that the answer of totally blocking both is likely not the best answer.
I don't understand. If you are okay blocking the useful one of the two, why would it ever be allowed to not block the less useful and more risky? This just doesn't make sense. If you are willing to block cloud storage you should be blocking USB by default, no question. Blocking only one doesn't make any general sense. Blocking both or neither, does.
-
@thanksaj said:
Some things are still given to people via USB because of the size of the file(s). If you have a 64GB flash drive, and have 50GB of data, it's a lot quicker to give it to someone via a flash drive than via a download from any cloud storage provider.
Because you are working as an IT professional in a business that doesn't have a network? What kind of scenario are you picturing here?
-
@scottalanmiller said:
@thanksaj said:
The fact is that the answer of totally blocking both is likely not the best answer.
I don't understand. If you are okay blocking the useful one of the two, why would it ever be allowed to not block the less useful and more risky? This just doesn't make sense. If you are willing to block cloud storage you should be blocking USB by default, no question. Blocking only one doesn't make any general sense. Blocking both or neither, does.
Scott, just drop it. This discussion has run its course.
