Re: Lost & Found mobile devices

["Plesco, Todd" <tplesco () CHAPMAN EDU>]

I like a combination approach: If the mobile storage item does not have minimum identifying marks (name & phone #) then 
it will be destroyed after a specific waiting period.  

I have hesitation to even return the item to the supposed rightful owner though assuming the slight chance of malware 
or incorrect owner.

Todd A. Plesco  CISM, CBCP
Chapman University, Director of Information Security
One University Drive, Orange, CA 92866
Phone: (714) 744-7979/Fax: (714) 744-7041


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Sam 
Hooker
Sent: Thursday, February 25, 2010 11:08 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Lost & Found mobile devices


We don't yet have an institution-wide approach that I'm aware of, but it bears noting that "lost" removable media have 
been known to be a vector for malware; a vector which depends upon the curiosity of the finder for propagation.

We recently had a discussion about this at UVM; The suggestion I liked best was basically, "retain, don't inspect, 
destroy after a certain period if unclaimed".


Cheers,

-sth

--
Sam Hooker | samuel.hooker () uvm edu
Systems Architecture and Administration
Enterprise Technology Services
The University of Vermont


On 2/25/10 1:20 PM, Plesco, Todd wrote:
> We have several locations (Public Safety, help desk, etc) where occasionally a thumb drive is dropped off which was 
> found on campus.  
>
> Do you erase them outright?  Do you check them (for a resume.doc type identifying file)?  What are the liabilities?  
> How does your organization handle lost&found thumb drive devices?  Policy?
>
> Todd A. Plesco  CISM, CBCP
> Chapman University, Director of Information Security
> One University Drive, Orange, CA 92866
> Phone: (714) 744-7979/Fax: (714) 744-7041