Re: Home laptops on a corporate network

[christopherkelley () hotmail com]

I'd recommend NOT doing this. Especially if you are trying comply with HIPAA. Keep in mind that you will have little to 
no management capability over these personal laptops, which means you have no ability to verify patch level and AV 
update on these machines that may have EPHI on them. Not to mention the fact that these employees are probably taking 
them home and plugging them into their home networks, where they (or their kids) are running bearshare, gnutella, 
grokster, bitorrent, and surfing to unfiltered web sites. Not only does this mean that they are potentially exposing 
critical data in this manner, it also means they are bringing potentially infested computers into the soft chewy center 
of your network.

Whenever you have an employee with a laptop, you create a liability to your network, allowing them to use personal 
laptops presents an even bigger liability. IMHO, this level of risk is unacceptable, especially from a HIPAA compliance 
standpoint.