[unisog] Blackberry timeout

[Andrew Bell]

Hi Ian:

I didn't receive any off-list replies at all - I guess this isn't
really a big deal for this group.

I made my argument around the idea that "my mandate is to strike a
reasonable balance between ease of use, and the security of the data
entrusted to my care". Then I referenced the typically short timeouts
found in corporate and government environments for benchmarking and left
it at that.

Just for giggles, here's a snippet of the request I received that
started it all:

"On Tuesday I was driving to *** with multiple e-mail queries in that
region who might welcome a visit, but each time I went to check for a
reply, I had to pull over and re-enter the password."

So, they're smart enough to pull over to enter the password, but think
it's OK to *read* mail while driving?  Unfortunately, it wasn't
appropriate to reference applied Darwinism in my response.

Andrew

>>> On 02/06/2008 at 11:54 am, "Lazerwitz, Mr. Ian M."
<ilazerwitz at pace.edu>
wrote:
> Andrew -
> 
> I was curious if you received many responses to this?  I have no 
> timeout/password policy, and was curious of what you found!!!!
> 
> Regards,
> 
> Ian
> 
> -----Original Message-----
> From: unisog-bounces at lists.dshield.org 
> [mailto:unisog-bounces at lists.dshield.org] On Behalf Of Andrew Bell
> Sent: Thursday, May 22, 2008 5:40 PM
> To: unisog at lists.dshield.org 
> Subject: [unisog] Blackberry timeout
> 
> Hello;
> 
> I have recently been challenged to defend our 20 minute mandatory
> locking policy on Blackberrys, and would like to solicit feedback
from
> this community.
> 
> What, if any, locking policies are in place at your institutions? 
Have
> you found a standard reply that works well for those who insist that
> it's too inconvenient for them?
> 
> If anyone would prefer to reply off list, I will summarize the
results
> in a day or so.
> 
> Thanks
> 
> Andrew Bell
> Manager, Digital Service Delivery & Administration
> Trent University
> Peterborough, Ontario
> 
> _______________________________________________
> unisog mailing list
> unisog at lists.dshield.org 
> https://lists.sans.org/mailman/listinfo/unisog