External data carriers and cloud services – a residual risk remains

Data on external data carries (e.g. flash drives, CDs, DVDs, external hard disks) and mobile devices is exposed to particular risks. This data is poorly protected against theft, loss and destruction. Data stored in a cloud can generally be viewed by the operator. The data can be lost if there is a technical problem or if the operator sells or abandons the cloud.
And remember that your cloud data is in the hands of others and can be abused in the worst case scenario.

  1. Set up access protection for external data carriers. Keep them safe and do not lend them to others.
  2. Ensure that you connect only external data carriers from the Federal Administration to your work devices.
  3. Consider only known cloud service providers. Encrypt cloud data and additionally back it up on an external data carrier.

Further information

Format external data media (USB sticks, external hard disk) you receive, before using them for the first time

Whenever possible, do not plug any external data carriers into your system. However, if this is absolutely necessary, hold down the shift key while inserting (this switches off the autostart function) and start formatting with the right mouse button in the selection menu.

 

How do you encrypt cloud data?

If you use offers from cloud service providers, we recommend providers who encrypt the data BEFORE depositing it in the cloud. This gives you additional protection against unauthorised access to your data. However, always remember to back up your data additionally (e.g. to an external data carrier). 

 

Last modification 12.12.2020

Top of page

https://www.ncsc.admin.ch/content/ncsc/en/home/dokumentation/bundesinterne-kampagnen/externe_datentraeger.html