Welcome Guest. | Log In | Register | Membership Benefits

Confidential Data At Risk Even With Policies In Place; Xerox And McAfee Team Up To Deliver A New Level Of Protection

New survey says more than half of workers don’t always follow or are unaware of their company’s security policies

Feb 14, 2012 | 10:40 AM | 


ROCHESTER, N.Y. and SANTA CLARA, Calif. – Think confidential information is protected by company IT security policies? Think again. A new survey commissioned by Xerox (NYSE: XRX) and McAfee, reveals that more than half (54 percent) of employees say they don’t always follow their company’s IT security policies (33 percent) or aren’t even aware of the policies (21 percent) – leaving the security of customer credit card numbers, financial reports, and HR and tax documents at risk.

According to the survey, 39 percent of employees who copy, scan or print confidential information at work worry at least sometimes whether the information on a networked device will remain secure.

To address this concern, Xerox and McAfee are teaming up to design a security system to help companies protect against threats to this confidential data. By integrating embedded McAfee software into Xerox technology, the two companies plan to use a whitelisting method that allows only approved files to run, offering significantly more protection than traditional black listing tactics, where a user has to be aware of and proactively block viruses, spyware and other malicious software. Additionally, the solution provides an audit trail to track and investigate the time and origin of security events, and take action on them.

“With more than 50,000 new security threats emerging each day, protecting sensitive company information can be intimidating for IT managers – especially when you consider that any device sitting on the network, from a PC to a fax machine, can be exposed to those threats,” said Rick Dastin, president, Enterprise Business Group, Xerox Corporation. “This partnership will work to ensure those devices are secure and company information is protected.”

Xerox and McAfee are improving the safety of devices on the network to protect proprietary company data – a needed solution according to survey data, which also found that some companies don’t take simple steps to lessen the risk, such as making sure employees are aware of IT policies and use access codes to pick up prints and copies. Additional survey results found:

Half (51 percent) of those employees whose workplace has a printer, copier or MFP say they’ve copied, scanned or printed confidential information at work. Of the 39 percent who say they are at least sometimes worried about confidential information staying secure, 86 percent say they are at least somewhat worried about personal information, 77 percent say customer data, 77 percent say employee information and 70 percent say proprietary company information. More than half (54 percent) say computers pose the biggest security threat to their company’s network compared to other IT devices, while only 6 percent say it is MFPs. Only 13 percent of employees whose workplace has a printer, copier or MFP say they are prompted to enter a password or passcode on the MFP before releasing a job they’ve printed or accessing the ability to copy.

“The threat landscape has evolved to include devices that when originally designed, where never considered a security threat,” said Tom Moore, vice president of embedded sales, McAfee. “Now we are seeing the need for security on devices like MFPs to protect confidential and proprietary data, which if lost or stolen, could negatively impact a company and its employees. The partnership with McAfee and Xerox embeds security into the device for better protection.”

For more information about the Xerox partnership with McAfee, along with videos and images, visit http://www.xerox.com/security.

Survey Methodology

This survey was conducted online within the United States by Harris Interactive on behalf of Xerox from Jan. 5-9, 2012 among 2,541 adults ages 18 and older, of which 1,391 are employed full and/or part time. This survey is not based on a probability sample and therefore no estimate of theoretical sampling error can be calculated.

About Xerox

With sales approaching $23 billion, Xerox (NYSE: XRX) is the world’s leading enterprise for business process and document management. Its technology, expertise and services enable workplaces – from small businesses to large global enterprises – to simplify the way work gets done so they operate more effectively and focus more on what matters most: their real business. Headquartered in Norwalk, Conn., Xerox offers business process outsourcing and IT outsourcing services, including data processing, healthcare solutions, HR benefits management, finance support, transportation solutions, and customer relationship management services for commercial and government organizations worldwide. The company also provides extensive leading-edge document technology, services, software and genuine Xerox supplies for graphic communication and office printing environments of any size. The 140,000 people of Xerox serve clients in more than 160 countries. For more information, visit http://www.xerox.com, http://news.xerox.com or http://www.realbusiness.com. For investor information, visit http://www.xerox.com/investor.



Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dark Reading encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dark Reading moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. Dark Reading further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
Subscribe to RSS



Insider Threat Reports

report How to Prevent an Illicit Data Dump
There are no silver bullets when it comes to protecting company and customer data from loss or theft, but there are technological and procedural systems that will go a long way toward preventing a WikiLeaks-like data dump. Here are some tips and tricks to help protect your organization's most sensitive information.

report Email and Data Loss
Email encryption, rights management, email gateways, and full-on data loss prevention systems can keep corporate data secure. Here's a look at the pros and cons of each, to help you determine what?s best for your business.

report An Insider Threat Reality check
Heightened concern that users could inadvertently expose or leak -- or purposely steal -- an organization's sensitive data has spurred debate over the proper technology and training to protect the crown jewels. In this special retrospective of recent news coverage, Dark Reading takes a look at how organizations are handling the threat -- and what users are really up to.

Other reports from the Insider Threat Tech Center:

Related Content

Protection from Insider Threats
Preventing data misuse by trusted users is the most difficult information protection challenge. Insiders already have full authorization to the data, making traditional IT secure methods in effective. Learn about a more powerful security approach and proven strategies to prevent insider misuse.

Strategies for Protecting Intellectual Property
A company's intellectual property (IP) represents a significant portion of assets and a critical component of competitive differentiation, but the potential value of any IP is directly linked to its limit of acceptable use. Learn how you can put your IP to work within collaborative environments without undue risk and maximize competitive advantages.

Protecting Against WikiLeaks Type Events and the Insider Threat
The sensitive information supplied to WikiLeaks and other social justice websites comes from trusted insiders. Get the answers to the open gaps left in the WikiLeaks story and learn how you can prevent insider threats that are just as detrimental in your organization.

Insider Threat: An Inside Look at a Fortune 100 Company's Prevention Program
The ways and means by which a privileged user can successfully steal proprietary data today is staggering. One venerable company that suffered a devastating incident decided to do something about it. Find out how it built one of the most productive insider threat prevention programs in the Fortune 100.

Protection of Intellectual Property and Trade Secrets across a Global Enterprise
As a designer and manufacturer of industrial technology, this Fortune 50 company knew that securing their intellectual property (IP) and trade secret data was essential. It created a program to identify risks to their IP and trade secrets and soon caught a privileged user attempting to compromise IP. Download this case study to see a real example of intellectual property protection at work.




Featured Webcasts
Featured Whitepapers
Featured Reports