Monitor CD Burning

[Chr0nic]

As part of our Security Procedures we are looking at ways of monitoring data transferred onto CD or floppies as we suspect that previous ex-employees may have provided company info to competitors. Does anyone know of anyway that this is possible either through scripting or a 3rd party application.
Any help/pointers greatly appreciated.

 

[iSeriesCodePoet]

You could just remove the floppies and the CD-Bruners. Here we only use CD-ROMS and floppies. But since Dell is dropping the floppy..... iSeriesCodePoet
IBM iSeries (AS/400) Programmer

 

[iSeriesCodePoet]

....but then they could email it from a hotmail account... iSeriesCodePoet
IBM iSeries (AS/400) Programmer

 

[SgtB]

Dell is dropping the floppy?
You have a link for this? ________________________________________
Check out

http://www.security-forums.com

 

[iSeriesCodePoet]

There was one on /. before. I don't know if there was an offical announcement on their website.

Basically, they are slowly making it an add-on cost instead of outright not selling them. They want to promote the USB drives instead. iSeriesCodePoet
IBM iSeries (AS/400) Programmer

 

[ANFPS26]

Here is one link:

http://australianit.news.com.au/articles/0,7204,5987742^15419^^nbv^15309,00.html

Jim

 

[SgtB]

Well, as long as they're still selling them. I guess I'll just pay the extra bit for the floppy then. ________________________________________
Check out

http://www.security-forums.com

 

[Chr0nic]

Unfortunately, the CD burners and floppies are required for certain aspects of peoples jobs. So we just want to cover ourselves and have a way of tracking what data is being burnt or copied to floppy.

 

[iSeriesCodePoet]

To the best of my knowledge there isn't. ...thus why I coming up with alternatives. iSeriesCodePoet
IBM iSeries (AS/400) Programmer

Want an online bookmarking spot?

http://www.koldark.net/bookmark4u/

 

[flyboytim]

Like a print server, you could centralize CD Burning on a single machine. Individuals send their data to their own folder on the Burner machine, and send a request to burn the contents onto a disk. The operator of the Burner (who can be otherwise engaged in administration, data entry or secretarial work) then sets the burning operation into play, labels the disk (or multiple copies thereof) and sends it/them off to the Requester. A backup of the data can be sent to whomsoever you want to scan the content for unauthorised leakage. Since CD burning takes a few minutes, and may be unreliable if the PC is being used for other sophisticated operations at the time, you could justify letting a junior administrator have responsibility for this function on efficiency and costing grounds alone.