Common staff mistakes can lead to data leaks

Other bad behavior includes one in five staff storing their system logins and passwords on their computer (or writing them down and leaving them on their desk, in unlocked cabinets, or pasted on their computers).

With the data losses on the rise from missing USB sticks, it is no surprise then that 22 percent of staff admit they carry corporate data on portable storage devices outside of the office.

Finally, Cisco also sees a problem with a process called tailgating, whereby a person closely follows a staff member into the office without being challenged for identification. 13 percent said they allow non-employees to roam around offices unsupervised.

As expected, Cisco recommends the following best practices for preventing data loss:

-- Know your data; Manage it well: Know how/where it's stored, accessed, used.

-- Treat data as if it's your own - Protect it like it's your money: Educate employees how data protection equates to money earned and money lost.

-- Institutionalize standards for safe conduct: Determine global policy objectives and create localized education tailored to a country's culture and threat landscape.

-- Foster a culture of trust: "Employees need to feel comfortable reporting incidents so IT can resolve problems faster.

-- Establish security awareness, education and training: Think globally, but localize and tailor programs for regions based on threat landscape and culture.

"Data protection requires teamwork across the company. It's not just an IT job anymore," Stewart said.

Techworld is an InfoWorld affiliate.