VA to expand encryption to in-house removable storage

This is a great story, the VA is finally going to require encryption for portable storage devices,...what took so long, too many embarrassing stories?  Look for this to expand to a hospital near you.  If anyone on this blog has questions regarding encryption, please don't hesitate to contact us for additional information. All the items listed are portable storage devices that already require encryption so this one is a little confusing in nature.  BD

The Veterans Affairs Department will now require encryption for portable storage devices used internally effective in December because of a data breach at its medical center in Birmingham, Ala., earlier this year. VA already requires the use of encrypted flash drives, hard drives and other removable devices when employees have permission to take personally identifiable data off site.

Now the agency will coordinate with the Office of Management and Budget and the President’s Identity Theft Task Force to develop government wide criteria for determining under what conditions potential identity theft victims should be notified and offered free credit monitoring, said Robert Howard, VA’s chief information officer, in a letter to the agency’s Office of Inspector General in late June.

FCW.com News - VA to expand encryption to in-house removable storage