[unisog] Blackberry timeout - summary

[Shandon]

Andrew,
Your query got me thinking about our policy, and we'll be implementing a
lockout policy in the near future.

Thanks,
Shandon

On Thu, Jun 5, 2008 at 3:22 PM, Andrew Bell <andrewbell at trentu.ca> wrote:

> As promises, a summary of off-list responses:
>
> Only one respondent has a specific policy in place, and they use a
> timeout value of one hour.  Their policy applies to all managed
> handhelds, regardless of whether they contain "sensitive" data
>
> The other respondents expressed general agreement that security
> timeouts should be used whenever a handheld contained sensitive data,
> and that a 20-30 minute timeout would be a reasonable value.  However,
> they either did not have, or did not disclose, specific policies in
> place at their institutions.
>
> For myself, I will be continuing to provision all of our Blackberries
> with a 20 minute timeout.  My position on sensitive data is that the end
> user does not control what gets emailed to them, therefore all devices
> are assumed to contain data which must be protected.
>
> Thank you all for your input.
>
> Andrew Bell
> Manager, Digital Service Delivery & Administration
> Trent University
> Peterborough, Ontario
>
> _______________________________________________
> unisog mailing list
> unisog at lists.dshield.org
> https://lists.sans.org/mailman/listinfo/unisog
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.sans.org/pipermail/unisog/attachments/20080605/f5562c8c/attachment.htm