Keeping Data Safe from Employee Departures

Cybersecurity protocols focus on reaffirming a company's defense from outside threats, but has your operation considered the data leaving from inside your building? In a report published by Code42, a 40% increase in "data exposure events" occurred between 2020 and 2021, likely due to trending hybrid and remote work infrastructure. This realization, paired with the Great Resignation, makes one assume this number is sure to increase.

Many considerations factor into company information leaving with employee departures. Employees may feel ownership of intellectual property and use it to leverage a better position at a competing company. They may sell stolen data for financial gain or lack an understanding of data security protocols. Regardless of the instance, without a forensic analysis, employees move on, and their former companies suffer.

Signs to Investigate

The best line of defense against stolen data is to adopt routine preservation protocols to secure company materials. Incorporating this practice can save your operation in the long run and proactively communicates data security guidelines to employees.

Here are the key places to look to see if company data has accompanied a recent employee departure:

• Use of USB Devices or Smart Phones. Portability of data is the most commonly used means of stealing company data. If the use of a removable device is apparent, consider an investigation.
• Public cloud storage services. Google Chrome and DropBox account for 52% of data exposure outside of removable media, according to a study by Code42.
• Emails, including deleted emails
• Accessed and Deleted Files. Were sensitive files opened near the employee departure date? 
• Social Media. Has your former employee posted their new position on LinkedIn? Assess potentially shared information that may have been given to a competitor.
• Internet History - The history cache may share file access records and timestamps when and where requested.

Digital Forensics on the Case

When in doubt, allow a skilled Data Analyst to investigate the matter. IST's Digital Forensics team assumes a larger operational force with a focused and knowledgeable team, keeping service secure and personalized to our clients. In a consultation, we use industry-leading tools to parse and organize forensic images, matching keywords with unusual user behavior. Our analysts work hand in hand with clients to evaluate the initial collection and investigate further if needed.

Unlike other vendors, IST provides an in-house solution where data is collected, processed, and hosted in eDiscovery by Project Managers who work closely with our analysts. IST recognizes the importance of sensitive data and offers a collaborative white-glove service where clients know and feel confident in the service they receive. National Director of Digital Forensics Andy Jacobs adds, "We're not just ticket takers. We don't pass things along. Your analyst will stay with you the entire time; make sure that no stone's left unturned from the start to the end of the case."

Conclusion

Data breaches negatively impact business, from loss of customers who lose trust to failure of an operation's competitive advantage. Companies can assume non-compliance fines and penalties and face external audits, wasting valuable time and money needed to rebuild. Incorporating routine preservation of company information provides a proactive strategy to save money in the long run.

Strengthening cybersecurity protocols before and after an employee departs will bridge the divide between a vulnerable and fortified operation. IST Management invests in technologies and talent to protect our clients' most essential resources for the current and future market.