I am seeking a feasible solution to aggressively audit file server files from a small business perspective in a Microsoft environment.
Scenario Example: An employee accesses company’s network shared files, they steal sensitive company information by copying or moving the files, then leave the company and use the information they stole for whatever their ends are.
The objective is to monitor file copies, file moves, file access history, access frequency, etc.
I realize this is a difficult task. Between flash drives, email, mobile computers, external hard drives, online services like Rapidshare, it?s difficult to cover all the bases. I can also think of plenty more scenarios that would warrant aggressive file auditing rather than simple employee theft and/or extortion.
Rather than restrict employees from bringing in flash drives, laptops, etc. which they need for their job, it would seem to make more sense to have taken proactive measures so if files are compromised, there?s a history of access…a paper trial.
Your advice is much appreciated.
