Security Basics mailing list archives

Re: Corporate policy question - Personal Laptops


From: "Ryan Chow" <rynchow () gmail com>
Date: Fri, 12 Sep 2008 09:29:03 +1000

Hi,

I think obtaining advice from the company's legal consul is the first
step to determine what rights the company has to access personal
laptops before any wiping occurs.

Without speculating about your company's IT security environment,
there may be the chance that company data is also stored at home etc
in which wiping a personal laptop known to have been connected to the
corporate network will not remove.

If not already in the company security policy, it would be prudent to
mandate that company information not be stored on personal computers
and not connected to the corporate network.

regards,

Ryan.



On Fri, Sep 12, 2008 at 3:53 AM, Tom Yarrish <cdtdelta () gmail com> wrote:
Hey all,
Needed some advice on a corporate policy issue.  If an employee has a
personal laptop in the office, and that employee is terminated in the
process of a merger, can the company wipe the hard drive of the
personal computer before it's returned to that employee?  Here's the
scenario:

Our company is going through a merger, and through the rounds of
"integration" of the two companies, employees that are let go from the
IT department are escorted out of the building immediately, and not
allowed to return. Their manager packs up their personal affects and
ships it to them.  In one case, the employee had some personal laptops
in their office, and wants them back (obviously).  Are we allowed to
wipe the hard drive of that personal laptop before giving it back to
the employee?

I'm trying to determine if this is even legal or not, so I'm not sure
where to look for advice.

Thanks ahead of time....



Current thread: