8 ms·
I worked for a company that does bring-your-own-device and I am worried about how to verify that employees have deleted company goods (customer data, access key
by jsemrau 6y ago
I worked for a company that does bring-your-own-device and I am worried about how to verify that employees have deleted company goods (customer data, access keys, etc) once they have left the company.
- paulryanrogers 6y agoKeys should be revoked server side. So at least those should be easy to manage
- yencabulator 6y agoExactly the same way you "verify" that they haven't kept printed copies / taken lots of photos of their computer screen / read things out loud to their lover on Saturday nights. That is, you don't. You set up legalese that lets you sue them in a way that hurts if they abuse that, or you go to real opsec where they're prevented from downloading/printing, and even only access data in a secure room where no cameras enter. As you have probably guessed, first option is typically the more realistic one.
- xiphias2 6y agoAt Google we had a separate enterprise account created on the mobile phone if the employee opted for bring-your-own phone (at least for Android...I don't know about iPhones). For laptops this doesn't work, so the company has to provide it.