Laptop Security

From: Alan Blackwell (blackwellalan@hotmail.com)
Date: 06/28/02 

From: "Alan Blackwell" <blackwellalan@hotmail.com>
To: security-basics@securityfocus.com
Date: Fri, 28 Jun 2002 14:19:46 +0100

Hi All,

I am currently looking at laptop security where I work and I was wondering
if anyone here has experience of using any of the following products.

I am thinking of using some form of encryption product on those laptops and
PDAs that contain sensitive information. Does anyone have any experience of
using the Carraig or PointSec products who cares to comment on them?

I feel that setting the BIOS password and using Win2000/XP encrypting file
system as a cheap alternative on laptops isn't a good idea. Because the BIOS
password can be broken, or the hard drive moved to another machine. And the
EFS can be broken into easier than either the Carraig or PointSec's
products. Can anyone tell me if I am correct in thinking this?

Another measure I am looking at is either SAFEMARK stencils, or STOP tags.
These will hopefully deter some thieves and allow equipment that the police
find to be returned to us. At the moment I am having trouble finding a
supplier of STOP tags in the UK so I guess I will use the SAFEMARK stencils.
Has anyone else used SAFEMARK who cares to comment on them? In particular is
it possible to remove the SAFEMARK from the machine?

I have taken a look at CompuTrace tracking software but I am going to have a
hard time justifying the cost for all our laptops. Is there anyone out there
who uses any form of laptop tracking software that can tell me what
percentage of the laptops that have been stolen from there company, that
have tracking software on, are subsequently recovered because of the
tracking software? Also on average does it take days weeks or months before
the laptop is recovered?

I am working on new guidelines for users, we already use security cables and
personal firewalls on laptops is another project. So I think I have covered
everything. Is there anything else that someone has tried you feel is worth
considering or any sources of info on laptop security that are particularly
good and worth reading?

Thanks.

Alan
UK

_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com