Protecting Against Leaking Google Drive Synced Files from a Stolen Laptop
Our small company uses Google Drive to store some medium-sensitivity documents. While storing them in Drive has been convenient, we are concerned about the scenario where an employee’s laptop is lost or stolen, potentially giving access to the synced files. In this article, we will explore various options to protect against this scenario without disrupting our employees’ workflow.
Syncing Specific Folders
One option is to only sync specific folders from Google Drive, while the rest are only available via online sign-in. However, this may be difficult to enforce and might not be the ideal solution for your situation.
Tighter Access Control
Implementing tighter access control and using multiple accounts per person could help mitigate the risk. Separating mobile and office use files can also be considered.
Full Disk Encryption
Full Disk Encryption is a highly secure option. While it’s not necessary to encrypt the entire disk, it simplifies the setup process. Keep in mind that the security will not be in effect if the laptop is stolen while unlocked.
Cloud-Based Solutions
Migrating to cloud-based solutions, such as Google Docs and Google Sheets, or other browser-based services, could be the best option. This eliminates the need to store files locally and reduces the risk of data leakage.
Additional Measures
Other measures to consider include remotely signing in to in-office computers from mobile laptops, ensuring sessions are invalidated when devices are stolen, and detecting theft. Physical measures like using a Kensington Lock Slot can also deter theft.
While there may be utilities available that provide filesystem-like access without syncing the file itself, further research is needed to explore these options.