I work with sensitive information and there are clearly controls on what can and can't be made public. While I am not an IT security person, I believe I have found a vulnerability. When I was in school and using the computer lab, one of the things I did was download portable programs onto a usb drive so that I could use the programs I wanted without worrying about the administrative privledges. I am confident that these programs could be downloaded and operated on my computer here at work.
Don't these programs pose a risk? Assuming such a program can be installed and operated on a computer, couldn't an insider steal or manipulate information at will? Do such programs inherently cause triggers that programs installed the "normal" way don't?