Security Basics mailing list archives

Re: Corporate policy question - Personal Laptops


From: Patrick Horgan <phorgan1 () gmail com>
Date: Tue, 16 Sep 2008 12:13:42 -0700

Daniel Pérez wrote:
Hi Tom!

IT's a hard decision: you can't be sure that the employee copied company's files
in his personal laptop.

I think you should check two things:
a) Does your contract with this employee has a clause that indicates if he can
bring his laptop to the office, or the procedure in the case of dimission/firing?
if the contract states that you shouldn't bring your personal computer to the
office, you could wipe it.
Not true here.
If the contract states that in case of quiting/getting
fired user is not allowed to return to his desk, and that any personal stuff
would be returned after revission, you could also do the same.
I don't know what revission is but even if the policy said that you are agreeing to have your hard drive wiped if you bring a personal computer on site, the courts might very well disagree. There's a long history of privacy and personal property rights and the courts have pretty consistently agreed that you can't sign them away.

It would be too risky. As others have said, if it's an issue at a site then you don' t allow people to bring it them onsite.

Patrick


Current thread: