Lumension Device Control

The problem of data leakage due to the accidental or sometimes malicious use of removable devices and/or removable media has reached alarming levels. In fact, over 85% of privacy and security professionals reported at least one breach and almost 64% reported multiple breaches that required notification.

To enhance productivity, organizations need to allow employees and partners access to data; and more employees are working remotely, thus requiring access from outside the network. But the potential impact of data loss is a very real concern, be it accidental or malicious. And today, removable devices (such as USB flash drives) and media (such as CDs/DVDs) are the most common data leakage routes -- no file copy limits, no encryption, no audit trails and no central management.

The information contained in customer data, corporate data and intellectual property is worth billions to some. And the costs for recovery of data and lost business are rapidly rising as well, with the average yearly cost now estimated to be $6.6 million.

Lumension Device Control, the primary component of Lumension Data Protection solution enforces organization-wide usage policies for removable devices, removable media, and data (such as read/write, encryption). Using a whitelist "default deny" approach, administrators can centrally manage your devices and data. Lumension Device Control enables organizations to embrace productivity-enhancing tools while limiting the potential for data leakage and its impact.

How Lumension Device Control Works

1. Discover - Identify all removable devices that are currently or have ever been connected to your endpoints

2. Assess - Categorize all "plug and play" devices by class, model and/or specific ID and define policy through a whitelist approach.

3. Implement - Enforce file copy limitations, file type filtering and forced encryption policies for data moved onto removable devices.

4. Monitor - Track all policy changes, administrator activities and file transfers to ensure continuous policy enforcement.

5. Report - Provide visibility into device and data usage to demonstrate compliance with corporate and/or regulatory policies.