Do employees in your company use office computers to download music and video files? If so, they may be putting the organization at serious risk of data theft.

Music is often downloaded through “peer-to-peer” (P2P) file sharing networks. Instead of accessing the files from a central location, people use software to connect directly with each other and share the information.

Millions of people use that software every day – and 15% of employees admit to doing it at work, according to a recent survey by the Information Systems Audit and Control Organization.

What are the risks? Here are some threats associated with P2P file-sharing that companies need to be aware of:

• Viruses - Since users download from each other rather than a central, organized location, the possibility of downloading a file infected with a virus is much higher.
• Data leakage - Using a P2P sharing program means other users can download files off of the employee’s computer – and that may include confidential corporate documents.
• Spyware - Free downloading programs often install other applications on the user’s machine, including so-called “spyware” that steals information off of the computer.

The solution: Work with HR to develop a policy against downloading unauthorized programs and monitor the network even more closely for dangerous activity.

Tags: document security, P2P, peer-to-peer