[SOLVED] Preventive measures to stop the employee from running with data ?

[diliptimblo]

Under Indian law an employee while departing cannot take with him any record of any data with him to which he had access while working in the firm. This is law as it is on the books. To get it implemented and the culprit penalized is an impossible task. Better to take preventive measures to stop the employee from running with the data. So can you tell us how to do this in all aspects?

1. Downloading the data from PC to hard disk
2. Emailing the data to a third party.
3. Transferring the data to another PC within the network which is not blocked.

We would be obliged for assistance

 

[The Idiot]

For the first you could block or disable usb ports in the bios and then require a password to access bios, along with not allowing employees to bring in personal usb devices. 2 you would need to block the outbound ports using a firewall and resrict the use of attachments in the email client. For the last you must follow the rule of least privilege and resrict access to only those who need it, and only for the limited time.