USB flash drive security advice

The EU Agency for European Network and Information (ENISA) said small data storage devices such as personal flash drives had become "universal business tools". It claimed 85 million USB flash drives were sold in 2007.

However, the devices often lacked security control, and despite the fact they might contain private data, financial information, business plans or other confidential records, they were usually overlooked by corporate policies on audits, back-ups, encryption and asset management.

Andrea Pirotti, executive director of ENISA, said: "The cost of a USB flash drive may be insignificant but the value of the data it might contain can be priceless."

Among its 19 recommendations, the Agency highlighted the importance of a risk assessment as well as controls.

The 'Secure USB Flash Drives' report (pdf) can be viewed/downloaded here.