Re: Notebook policy (need advice)

On 2007-01-25 Eric Furman wrote:
I'll give you one very simple policy that you should enforce that will
make most of your concerns moot:

NEVER EVER EVER STORE SENSITIVE DATA ON A LAPTOP!

Anybody, and I mean ANYBODY, found with sensitive data on their laptop
should have it seized and they should be immediately dismissed.

There is virtually no reason to ever store sensitive data on a laptop.
Sensitive data should only ever reside on hardened servers in a
physically secured server room. If your employees need to work with
this data there are several means to securely access this data
remotely.

Just take your average insurance salesman. How do you guarantee that he
has remote access from everywhere he may make a contract?

cu
59cobalt
--
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

Relevant Pages

  • RE: Notebook policy (need advice)
    ... I'll give you one very simple policy that you should enforce ... NEVER EVER EVER STORE SENSITIVE DATA ON A LAPTOP! ... Not all positions within a company require the use of a notebook for work ...
    (Security-Basics)
  • RE: Notebook policy (need advice)
    ... And that would totally defeat the purpose of using a laptop to compute remotely. ... It would be wiser to secure the laptop so that it can host sensitive data without it being such a huge security risk - whole disk encryption. ... Subject: Notebook policy ...
    (Security-Basics)
  • Re: Notebook policy (need advice)
    ... when they walk around with a laptop with sensitive data that if it were ... I used to work for a "Very Large Bank" and this was exactly the policy. ... Anybody, and I mean ANYBODY, found with sensitive data on ... Not all positions within a company require the use of a notebook for work ...
    (Security-Basics)
  • RE: Notebook policy (need advice)
    ... Anybody, and I mean ANYBODY, found with sensitive data on their laptop ... Subject: Notebook policy ... Said laptop would be in the possession of an armed law enforcement official. ...
    (Security-Basics)
  • Re: Notebook policy (need advice)
    ... Anybody, and I mean ANYBODY, found with sensitive data on ... Said laptop would be in the possession of an armed law enforcement ... I'll give you one very simple policy that you should enforce ... Not all positions within a company require the use of a notebook for work ...
    (Security-Basics)