Home > Articles

This chapter is from the book

This chapter is from the book

Computer Security Fundamentals, 5th EditionComputer Security Fundamentals, 5th Edition

Learn More Buy

This chapter is from the book

This chapter is from the book

Computer Security Fundamentals, 5th EditionComputer Security Fundamentals, 5th Edition

Learn More Buy

What Is Industrial Espionage?

Industrial espionage is the use of spying techniques to find out key information that is of economic value. Such data might include details on a competitor’s new project, a list of a competitor’s clients, research data, or any information that might give the spying organization an economic advantage. While the rationale for corporate espionage is different from the rationale for military espionage, corporate espionage often involves the same techniques employed by intelligence agencies, such as monitoring, photocopying files, or compromising a member of the target organization. Not only does economic espionage use the same techniques as intelligence agencies, but it often also uses the same people. There have been a number of incidents in which former intelligence agents have been found working in corporate espionage. When such individuals bring their skills and training to the world of corporate espionage, the situation becomes especially difficult for computer security experts.

IN PRACTICE: LEAVING WITH SENSITIVE DATA

While various computer experts and government agencies attempt to estimate the impact and spread of corporate espionage, its very nature makes accurate estimates impossible. Not only do the perpetrators not wish to disclose their crimes but often the victims will not disclose the events either. However, anecdotal evidence would suggest that the most common form of espionage is simply an employee quitting, taking a job with another firm, and leaving the first firm with sensitive data. In many cases, these employees choose data that is readily available within the company and, as such, the confidentiality of this data is considered a “gray area.” For example, a salesperson might leave with a printout of contacts and customers so that he can solicit them on behalf of the next employer.

It is critical that you have a very well-worded nondisclosure and noncompete agreement with all employees. It is best to solicit the services of an employment attorney to draw up this agreement. Additionally, you might consider limiting an employee’s access to data prior to terminating his employment. You should also conduct exit interviews and consider confiscating items such as company phone books, which may at first seem insignificant but could contain data that would be useful to another company. Also, thumb drives, smart phones, and other technologies provide a method for taking data out of a company, so some companies restrict the use of these devices.

Pearson IT Certification Promotional Mailings & Special Offers

I would like to receive exclusive offers and hear about products from Pearson IT Certification and its family of brands. I can unsubscribe at any time.