Abstract

This case is about a new threat to data security in organizations called pod slurping. Pod slurping refers to the stealing of data form the organizations’ network with portable data storage devices like ipods, digital cameras, pen drives and smart phones. Addressing this threat posed tough challenges to organizations as it is the employees of the organization who could be stealing the data. While data security experts were grappling with measures to discourage data theft by employees using such portable devices, the organizations were on the horns of a dilemma. Banning popular gadgets such as iPods could alienate the employees, and in many cases it was practically impossible to put a blanket ban on portable storage devices as they were not only ubiquitous but also very useful. Experts felt that organizations had to be balanced in their efforts in addressing this problem as too much monitoring or high-handedness on the organization’s part might hurt the morale of the employees, breed disloyalty, and lower productivity. Moreover, this threat was expected to intensify in the future as these portable devices were getting more sophisticated and acquiring wireless capabilities.

Learning Objectives

The case is structured to achieve the following Learning Objectives:

• Understand the threats posed to data security in organizations by advanced technology (in this case, the portable data storage devices like MP3 players) Understand the control measures to be put in place to protect the data in the organization Understand

Keywords

Pod Slurping, Data Theft, Data security, Industrial espionage, Intellectual property, Monitoring , Information technology, HR dilemma, IT security breach, iPods, Gartner, Digital rights management, Information security , Information assurance, Identity theft