RE: Corporate policy question - Personal Laptops

["Kenepp, Donald" <dkenepp () icgcommerce com>]

Hi,

  As others have said, I don't know the laws in your specific jurisdiction, but I wouldn't recommend risking being 
accused of extortion by holding someone's personal laptop for ransom, which is a possible response to you telling them 
you will hold it indefinitely while you talk to your legal department unless they consent to allowing you to destroy 
all the information on it.

  If you don't want this to be a potential issue, you shouldn't allow personal computers or personal data transfer 
devices at work.

  Sincerely,
    Donald

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Rodrigo Gutiérrez Burgos
Sent: Friday, September 12, 2008 1:51 PM
To: security-basics () securityfocus com
Subject: Re: Corporate policy question - Personal Laptops

The laptop is not the property of your company so i don't think you  
have the right to touch it,  Does your security policy say something  
about this?
I would sue you for hacking if you access my personal computer  
without my authorization.  If you wipe it, i would sue you about the  
6 million dollar project that was in it.

I recommend that you ask the former employee if you can wipe the hard  
drive (make sure your get it written and signed), just tell him that  
this will allow you to ship the computer today, otherwise he'll have  
to wait until you get a answer from legal dept.


Rod.-

El 12-09-2008, a las 7:19, Vogels, Mark escribió:

>  Hi Tom,
>
> If the laptop is personal as in private, then I don't see (in my  
> country at least) any reason why you would be allowed to even keep  
> the laptop, let alone destroy the data on it.
> If the laptop is company provided, then it's a different story.
>
> Kind regards,
>
> Mark Vogels
>
>
> -----Original Message-----
> From: listbounce () securityfocus com  
> [mailto:listbounce () securityfocus com] On Behalf Of Tom Yarrish
> Sent: donderdag 11 september 2008 19:54
> To: security-basics () securityfocus com
> Subject: Corporate policy question - Personal Laptops
>
> Hey all,
> Needed some advice on a corporate policy issue.  If an employee has  
> a personal laptop in the office, and that employee is terminated in  
> the process of a merger, can the company wipe the hard drive of the  
> personal computer before it's returned to that employee?  Here's the
> scenario:
>
> Our company is going through a merger, and through the rounds of  
> "integration" of the two companies, employees that are let go from  
> the IT department are escorted out of the building immediately, and  
> not allowed to return. Their manager packs up their personal  
> affects and ships it to them.  In one case, the employee had some  
> personal laptops in their office, and wants them back (obviously).   
> Are we allowed to wipe the hard drive of that personal laptop  
> before giving it back to the employee?
>
> I'm trying to determine if this is even legal or not, so I'm not  
> sure where to look for advice.
>
> Thanks ahead of time....


**********************************************************************
This e-mail is intended for the use of the addressee(s) only and may contain privileged, confidential, or proprietary 
information of ICG Commerce.  If you have received this message in error, please e-mail administrator at postmaster () 
icgcommerce com, then delete the e-mail and destroy any printed copy.   ICG Commerce reserves the right to retain, 
archive, use and disclose any emails that are sent from or to this email address. Thank you.

www.icgcommerce.com

**********************************************************************