Text 20371, 61 rader
Skriven 2006-08-14 12:45:06 av Charles Scaglione (1:106/2000.0)
  Kommentar till text 20343 av Jeff Guerdat (1:275/311)
Ärende: Re: Old HD.
===================
Jeff Guerdat wrote to Alan Zisman

JG>While I agree with you 100%, it's also worth noting that 1)
JG>permission  HAD been granted for the VA laptop and had been for a
JG>couple of years  and 2) the state of technology has changed, what
JG>with terminal servers,  encryption, etc.  There's also procedures in
JG>place that provide the  needed data with dummy info that isn't
JG>important to the task other than  to have the field filled properly.

Clarification is needed here....   While permission was granted for the 
notebook to be taken home that did not apply to the sensitive data.  
While working for the government as a field agent and otherwise, I too 
had permission to carry a government owned notebook to the field and to 
my home.  I did not, however, at any time have permission to load it 
with sensitive or classified data and then remove it from government 
controlled property.  

The controlling of sensitive and classified data is not just a VA thing.  
The rules and regulations are the same throughout the government.

If in fact someone at the VA office where he worked gave him 
permission to load that computer with sensitive data and then take it 
home, that someone should also bear the responsibility.  BTW, the 
individual who loaded the sensitive data (it was a VA personnel 
data base that contained SSANs and other info) was working on a special 
project at the time and was trying to meet a deadline.  The employee was 
probably dedicated and doing his job but he didn't follow the rules.

That kind of mistake is more easily forgiven while working for the 
federal government.  In the private sector he probably would have been 
terminated from his job.

Regards.














JG>These days, a VPN used to connect to a terminal server would be FAR 
JG>preferable to having data offsite.  This needs to be implemented
JG>ASAP.  The hard part, of course, is ensuring that the data isn't
JG>being removed  anyways.  Physical access to the data (laptop, CD, USB
JG>thumb drive,  etc.) makes security useless if in the wrong hands.
JG>--- Platinum Xpress/Win/WINServer v3.0pr5a
JG> * Origin: FidoTel & QWK on the Web! www.fidotel.com (1:275/311)

chscag@gmail.com

CMPQwk 1.42 1262

--- Maximus/2 3.01
 * Origin: COMM Port OS/2 juge.com 204.89.247.1 (281) 980-9671 (1:106/2000)