Re: Corporate policy question - Personal Laptops

["Sheldon Malm" <smalm () ncircle com>]

This probably isn't helpful to your current situation, but this is one of the reasons why you should not allow the use 
of personal laptops on your corporate network.  

In this case, get your legal department (or lawyer if you outsource legal services) involved immediately so you don't 
open yourself or your company to litigation from a possibly disgruntled former employee.  

Wiping the hard drive without advice from a legal expert might mean that you're the next one walked out of the building.

--------------------------
Sheldon Malm
Director 
Security Research and Development
nCircle VERT

Sent from my BlackBerry Wireless Handheld


----- Original Message -----
From: listbounce () securityfocus com <listbounce () securityfocus com>
To: security-basics () securityfocus com <security-basics () securityfocus com>
Sent: Thu Sep 11 10:53:42 2008
Subject: Corporate policy question - Personal Laptops

Hey all,
Needed some advice on a corporate policy issue.  If an employee has a
personal laptop in the office, and that employee is terminated in the
process of a merger, can the company wipe the hard drive of the
personal computer before it's returned to that employee?  Here's the
scenario:

Our company is going through a merger, and through the rounds of
"integration" of the two companies, employees that are let go from the
IT department are escorted out of the building immediately, and not
allowed to return. Their manager packs up their personal affects and
ships it to them.  In one case, the employee had some personal laptops
in their office, and wants them back (obviously).  Are we allowed to
wipe the hard drive of that personal laptop before giving it back to
the employee?

I'm trying to determine if this is even legal or not, so I'm not sure
where to look for advice.

Thanks ahead of time....