Re: Lost & Found mobile devices

[Richard Hopkins <richard.hopkins () BRISTOL AC UK>]

 <BCEEFF4D81EBF844BCB011E0A6A0613013DE9E7789 () MAIL07 cdnet-ad ad cod edu>

 <BCEEFF4D81EBF844BCB011E0A6A0613013DE9E778A () MAIL07 cdnet-ad ad cod edu>

 <30D22FB927DB8643AE44DEAC7A628CD5A132B53416 () UABEXMBS3 ad uab edu>
   A<dea50a6c1002230943k773fab74jbbc1a718a7816d90 () mail gmail com>
 A<4BFC260036BE8B4EB471F959C39D38950234F1EA () EXVS1 its uidaho edu>
 <A50A29B70741ED42BE44230B1DF6118426D8FB7D () ADAM chapman edu>
Originator-Info: login-token=Mulberry:01gZ5rUOQB3bq03+S6r+cEmLm5AOFzwfMUmbK+COR0r+TM4Ls=;
 token_authority=mailto:postmaster () bristol ac uk
X-Mailer: Mulberry/4.0.8 (Win32)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline


Previously (Feb 8th), I wrote...

"No, we no longer make any attempts to determine who they belong to, nor=20
what's on them. We just hold onto them for a "few" weeks and then pass them =

on to our (secure) disposal people."

Apart from the privacy angle, we're also concerned about malware, and so=20
treat them as toxic/hazardous waste.

Cheers,

Richard

--On Thursday, February 25, 2010 10:20 AM -0800 "Plesco, Todd"=20
<tplesco () CHAPMAN EDU> wrote:

> We have several locations (Public Safety, help desk, etc) where
> occasionally a thumb drive is dropped off which was found on campus.
>
> Do you erase them outright?  Do you check them (for a resume.doc type
> identifying file)?  What are the liabilities?  How does your organization
> handle lost&found thumb drive devices?  Policy?
>
> Todd A. Plesco=C2=A0 CISM, CBCP
> Chapman University, Director of Information Security
> One University Drive, Orange, CA 92866
> Phone: (714) 744-7979/Fax: (714) 744-7041



Richard

http://www.bris.ac.uk/infosec