Re: Lost & Found mobile devices

[Sam Hooker <samuel.hooker () UVM EDU>]

We don't yet have an institution-wide approach that I'm aware of, but it
bears noting that "lost" removable media have been known to be a vector
for malware; a vector which depends upon the curiosity of the finder for
propagation.

We recently had a discussion about this at UVM; The suggestion I liked
best was basically, "retain, don't inspect, destroy after a certain
period if unclaimed".


Cheers,

-sth

-- 
Sam Hooker | samuel.hooker () uvm edu
Systems Architecture and Administration
Enterprise Technology Services
The University of Vermont


On 2/25/10 1:20 PM, Plesco, Todd wrote:
> We have several locations (Public Safety, help desk, etc) where occasionally a thumb drive is dropped off which was 
> found on campus.  
>
> Do you erase them outright?  Do you check them (for a resume.doc type identifying file)?  What are the liabilities?  
> How does your organization handle lost&found thumb drive devices?  Policy?
>
> Todd A. Plesco  CISM, CBCP
> Chapman University, Director of Information Security
> One University Drive, Orange, CA 92866
> Phone: (714) 744-7979/Fax: (714) 744-7041

Attachment: signature.asc
Description: OpenPGP digital signature