Laptop computers are becoming a standard fixture for charter school administrators and teachers.   And since these devices are not typically stored in fixed locations like the classroom, some additional measures must be taken to protect them.

1. A formal security policy detailing employee responsibility for securing the device and data is essential.

2. Devices should never be left unattended.

3. Cable locks and docking stations work well when the devices are stored in a secure location, such as the teacher’s classroom.   (If a laptop is to be left in the classroom overnight, we recommend the item be stored in a secure storage area such as a locked file cabinet.

While Traveling

While traveling, extra precautions should be taken to address the higher risk associated with it:

1. Avoid storage in automobiles.

2. Airport – security area, check-in counters, baggage claim, restrooms, food courts, and curbside pick-up areas are all high-risk areas for theft of portable devices.   Warn end-users to maintain extra vigilance in these areas.

The Impact

Potential losses associated with the exposure to sensitive data stored on stolen laptops and desktop computers can be much more significant than the cost of replacing the stolen equipment. A study conducted in 2009 showed the average value of a lost laptop to be over $49,000. The cost itself was based on the following items:

• Replacement Cost
• Detection
• Forensics
• Data Breach
• Lost Intellectual Property
• Lost Productivity
• Legal Expenses

Loss Prevention

First, carefully evaluate the need to store sensitive information on any portable device or removable media. In many cases, it will be determined that the market for storing data on these difficult-to-secure devices is not worth the benefit given today’s threat environment.

If it is determined that storage on portable devices or removable media is necessary, this data must be protected, and encryption is the most common means of doing so.