Employee education: Organizations need to let their employees know that taking confidential information is wrong. Intellectual property theft awareness should be integral to security awareness training.
Enforce non-disclosure agreements (NDAs): In almost half of insider theft cases, the organization had IP agreements with the employee, which indicates the existence of a policy alone — without employee comprehension and effective enforcement — is ineffective. Include stronger, more specific language in employment agreements and ensure exit interviews include focused conversations around employees' continued responsibility to protect confidential information and return all company information and property (wherever stored). Make sure employees are aware that policy violations will be enforced and that theft of company information will have negative consequences to them and their future employer.
Monitoring technology: Implement a data protection policy that monitors inappropriate access and use of intellectual property and automatically notifies employees of violations, which increases security awareness and deters theft.
Half of employees who left or lost their jobs in the last 12 months kept confidential corporate data, according to a global survey from Symantec (Nasdaq: SYMC), and 40 percent plan to use it in their new jobs. The results show that everyday employees' attitudes and beliefs about intellectual property (IP) theft are at odds with the vast majority of company policies.
Employees not only think it is acceptable to take and use IP when they leave a company, but also believe their companies do not care. Only 47 percent say their organization takes action when employees take sensitive information contrary to company policy and 68 percent say their organization does not take steps to ensure employees do not use confidential competitive information from third parties. Organizations are failing to create an environment and culture that promotes employees' responsibility and accountability in protecting IP.