Secure USB could reduce government data breaches

The Stealth M600 provides 256-bit AES hardware encryption

Portable security firm MXI Security has launched a CESG certified encrypted USB device which could mitigate the risk associated with data loss by government departments.

The Stealth M600 USB flash drive received CAPS certification from CESG, the UK's National Technical Authority for Information Assurance, making the device usable by UK government agencies and other public sector bodies.

The drive features MXI's dedicated Bluefly processor which supports onboard hardware AES 256-bit encryption, authentication, manageability and biometrics, and provides protection against all malware, said the vendor. It is also waterproof and dustproof.

MXI president Gerard Reusing explained that the device provides full encryption at all times, and cannot be used unless it is unlocked by its legitimate owner.

"Having MXI Security receive CAPS certification signifies that the UK government understands the importance of securing data while maintaining portability," he said.

"Government agencies and organisations now have access to technology that provides a totally secure way of protecting their most sensitive data."

The drive could prove useful, given that public sector data loss incidents continue to hit the headlines, despite new powers given to the Information Commissioner's Office (ICO) to fine organisations up to £500,000 for serious breaches.

Just last month an unencrypted, non-password protected USB device and CDs were stolen from the home of a Barnet Council employee, putting sensitive personal information on over 9,000 children and members of their families at risk.

Lack of staff training was highlighted by the ICO as a major cause of the incident, but the use of more secure USB devices could have minimised the risk of sensitive data being exposed.

"Breaches involving such large numbers of children and family members could easily have been avoided," said ICO enforcement group manager Sally-Ann Poole at the time.

"I am pleased that all of the councils have now taken or proposed action to prevent further data breaches."