Ensuring That Data Inquiries Are Made Regarding All Lost or Stolen Computing Devices
| Procedure Purpose | To ensure the University has implemented procedures to verify that Data inquiries have been made regarding lost or stolen computer devices and potential security issues have been addressed |
|---|---|
| Procedure Number | 02-101 |
| Version | 1.2.1 |
| Effective Date | Feb 12 2009 |
| Prepared by | Barry Blackburn |
| Date Prepared | Feb 10 2009 |
| Approved By | Samuel Scalise |
| Date Approved | Feb 17 2009 |
| Last Updated By | Dustin Mollo |
| Date Last Updated | May 12 2009 |
| Associated Policy | |
| Contact(s) | Barry Blackburn (ISO) |
| Keywords |
Procedure
When a loss or theft of a computing device occurs, these procedures must be followed
- The employee must complete the Property Management Equipment Loss form.
- The employee must contact the local law enforcement agency to report the loss and note the Report Number on the Equipment Loss Report form.
- If the device contained any Level 1 Data, the employee must contact the Information Security Office as noted on the Equipment Loss Report form.
- An Information Security Office staff member interviews the employee and assigns a case number. The case number must be recorded on the Equipment Loss Report form.
- After the Equipment Loss Report form has been completed with all the signatures, etc. the employee submits the form to the Property Program Coordinator.
- NOTE: If Level 1 Data was involved, the Property Program Coordinator will verify the case number with an Information Security Office staff member.
*Definition: A Computing Device is a computer, PDA, or portable storage device.