A box of old client files is put out with the recycling. A laptop full of HR records is stolen from a car seat. The server cupboard is also where the cleaners keep their equipment, and the door has never been locked. Data breaches are usually thought of as cyber attacks, yet a surprising number begin with something entirely physical.
Information in the real world
We look at how sensitive information exists outside the network: paper files and printed board packs, laptops and phones, external drives, backup media and the rooms where servers and network equipment sit. For each, the question is the same: who could get hold of it, and how easily?
Storage, movement and disposal
Information is most exposed when it moves or reaches the end of its life. We review how documents and devices are transported, how printing and scanning are controlled, how visitors and contractors are kept away from sensitive material, and how paper, drives and old equipment are destroyed.
Simple habits that work
Clear desk practices, locked storage, encrypted devices and confidential waste bins sound basic, but they are often missing. We help organisations introduce them in a way that people actually follow.
Joining up physical and digital
Physical data security works hand in hand with knowing what data you hold, which is covered by a data audit review, and with clear policies and procedures. Book a review of how your information is protected.
