I'm dealing with over 100 employees using their personal laptops for work with Google Workspace and the Google Drive for Desktop app. Everyone has strong passwords and two-factor authentication set up, plus we back up files to the cloud three times a day. However, I'm worried about a potential security risk: if one of these personal devices gets hit by ransomware, it could encrypt files stored in Google Drive, affecting others when they open those files. Am I overreacting with my concerns? What extra measures can we implement to lower the risk?
3 Answers
Using personal devices for company files is pretty nuts! Without serious management solutions like MDM and stricter control over access, you're just asking for problems. If an employee leaves, they could walk away with company data without you having any real recourse. If the firm can’t invest in proper laptops or secure remote access, maybe remote work isn’t the best option for now.
I think you might be worrying a bit too much. The chances of a widespread infection like what you’re describing are really low, especially for backups. But you’re right that if an infected laptop syncs with Google Drive, it could cause issues for other users. It's worth a conversation with IT to ensure everyone’s on the same page about security protocols.
Honestly, relying on BYOD devices is pretty risky. You don’t have control over those machines, and if one gets hit, the implications could be big. Backups are excellent, but recovering from an attack can be much pricier and time-consuming than you might think. Also, consider how sensitive your data is; if it gets exposed, it could be a disaster.

Exactly! An infected laptop could definitely sync files back to Google Drive, spreading the issue. This is a legitimate concern that needs to be addressed!