Home > Security Tips > Risk Management Strategies > Recovering stolen laptops one step at a time
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

RISK MANAGEMENT STRATEGIES

Recovering stolen laptops one step at a time


Neil Spellman, Contributor
10.21.2008
Rating: -4.47- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


Late last year, a laptop was stolen from a student's car at Worcester Polytechnic Institute outside of Boston. Fortunately, when the student had purchased his laptop, he also purchased tracking software, which allowed university police to track and locate the computer. Within a few weeks, the student had his laptop back, and the thieves (along with several other stolen laptops) were in police custody. How the IT department, working in concert with the police, recovered the laptop is a worthy example of how adaptive software can assist in a laptop recovery effort and what can be done to deter theft of small electronic devices.

According to the FBI, approximately 2 million laptops are stolen each year. Even worse, only 2% are recovered. Depending on the data stored on the laptop, this can really get complicated for IT departments. It is not unlike losing one's wallet, except the wallet in this case could be the size of a box truck. And inside that box truck is everything from customers' names and billing information to the CEO's credit card number.

The easiest laptop to recover is one that never gets nabbed in the first place, so it's wise to take steps to prevent devices from walking away. Here's a list of a few best practices to keep laptops from being stolen:

When a device theft or loss takes place, it's of paramount importance to follow a template or a standard operating procedure. This means ha



ving such a procedure in place before any theft occurs. A few steps that should be involved are as follows:

In the case of the theft at Worcester Polytechnic, it was important that the investigators knew immediately that the theft had occurred; the owner reported the loss within hours rather than days. The student had also thought to install tracking software on his notebook, which enabled Computrace to track the laptop and assist in the recovery.

It's important to note, however, that it was not a matter of simply putting information down on a form and letting the justice system take its course. As the Network Security Analyst, I had to explain the probable cause so those in law enforcement -- and eventually the Clerk Magistrate and the Grand Jury -- could understand how the theft could be linked to the individual thief.

Though it's true that an ounce of prevention is worth a pound of cure in information security, it's still a good idea to have the pound of cure ready just in case.

About the author:
Neil Spellman is a network security analyst at Worcester Polytechnic Institute and was formerly a WPI police officer. He has a B.S. and is a graduate of the Massachusetts State Police Academy. For 20 years, he was a senior investigator for the Massachusetts Bureau of Special Investigations. Additionally, he serves on the board of directors for the Boston chapter of Infragard.


Rate this Tip
To rate tips, you must be a member of SearchSecurity.com.
Register now to start rating these tips. Log in if you are already a member.




BROWSE BY TAG
Risk Management Strategies,   Wireless Network Security: Setup and Tools,   Handheld and Mobile Device Security Best Practices,   Enterprise Network Security,   Network Intrusion Detection and Analysis,   Information Security Incident Response,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Risk Management Strategies
Cloud computing security: Choosing a VPN type to connect to the cloud
Cloud computing security: Routing and DNS security threats
Cloud computing security model overview: Network infrastructure issues
How to align an information security framework to your business model
When to use open source security tools over commercial products
Vulnerability test methods for application security assessments
Security book chapter: Applied Security Visualization
The 100-day plan: Achieving success as a new security manager
How to get information security buy-in from the executive team
The Little Black Book of Computer Security, 2nd Edition

Handheld and Mobile Device Security Best Practices
How to prevent mobile phone spying
Unified communications: Securing a converged infrastructure
RIM patches serious BlackBerry Attachment Service flaws
How secure are iPhone App Store mobile applications?
Is there a spy on my mobile device?
Mobile phones win during Pwn2Own contest
Latest Apple iPhone features prompt security concerns
Apple iPhone app could boost two-factor
What Obama's Blackberry means for mobile device security
SMS mobile worm attacks Symbian smartphones
Handheld and Mobile Device Security Best Practices Research

Information Security Incident Response
Tying log management and identity management shortens incident response
Tabletop exercises sharpen security and business continuity
Security book chapter: Applied Security Visualization
The challenges of incident response plans and procedures
CISOs, human resources cooperation vital to security
After a data breach, are there legal implications of sharing details?
Boosting morale of the information security staff after a data breach
IT security pros face challenge during economic crisis
Spotlight article: Domain 9, Physical Security
Sound compliance policies, practices reduce legal costs
Information Security Incident Response Research

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
incident response  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



Research Solutions for Network Security, Access Control and Security Threats
More Security Resources for Resellers, VARs and OEMs
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts