w4mp logo [Parliamentary portcullis]
It's 25 July 2008

Laptops security

A guide for those who work for an MP

Added: 26 February 2004

w4mp website is grateful to the Serjeant at Arms Department for providing this security guide.  It was first distributed in December 2003. Any queries should be pursued through the contacts mentioned below.


The information below provides a number of laptop theft prevention "best practices", which should be adopted to reduce the risk of theft of IT equipment and associated data, from public and other vulnerable areas both within the parliamentary estate and whilst working remotely.       

Please remember, that it is not just the inconvenience to the user and the cost of replacement which must be considered, but more importantly all the information contained on the machine, both business and personal, may be available to an unauthorised individual. 

If you require clarification with any of the recommendations, please contact the Crime Prevention Officer or the IT Security Officer, via the Palace main switchboard: 0207 219 3000

Use of Laptops and other portable IT equipment:

Due to the risk of loss or theft of portable IT equipment, such as laptops and Personal Digital Assistants (PDA), all users are recommended to adopt the following security best practices.  Portable IT equipment is, by its very nature, compact and easy to transport; therefore, if the proper controls are not implemented, such items are susceptible to theft.  Do not forget, it is not just the physical item that could be stolen, but all of your Parliamentary and personal data.  The IT equipment itself can be fairly easily replaced, but if you have not taken a recent back up of your data, it is extremely unlikely this will be recoverable.       

Best Practices to reduce the risk of data loss or unauthorised data access:

  • Take regular data back ups; do not forget to test a restore periodically
  • Do not keep your data back ups near the IT equipment. If the laptop is stolen or destroyed in a fire, the back up would be destroyed too!
  • Choose a strong password that is easy for you remember for hard for others to guess.
  • Do not share this password and do not write it down
  • Use a security cable at all times to reduce the risk of laptop theft
  • Ensure portable IT equipment is included in the asset register
  • Property mark the equipment overtly or covertly
  • Only use a standard screensaver
  • Use a power on password
  • Consider installing disc and/or email encryption software
  • Lock your screen when leaving your desk, even for a few minutes (Ctrl/Alt/Del)
  • Log off correctly, power off and lock your laptop away at the end of the working day

Whilst travelling or working remotely from the Parliamentary Estate:

  • Ensure that when using your IT equipment in a public place, the contents of the screen cannot be overlooked and the information gained by an unauthorised individual
  • Carry your portable IT equipment in an anonymous bag/case
  • Ensure you regularly update your anti-virus software; there are approximately 500 new viruses appearing each month
  • Do not bypass your anti virus software, it is there for your protection
  • Ensure your personal firewall is active prior to using the Internet
  • Do not load unauthorised or unlicensed software
  • Do not leave unattended in a motor vehicle, not even locked in the boot!
  • When in a hotel or conference centre, use a security cable to secure the device or leave in a secure room provided by the establishment
  • Avoid taking your laptop “to the pub”, but if you cannot make alternative arrangements,  when visiting restaurants, cafes, bars or waiting at stations, airports, ensure you keep your laptop in close proximity and in sight at all times

At Home

  • You should not allow any unauthorised person, even a family member, unobserved use of the laptop.  This will increase the risk of Parliamentary and personal information being copied, altered or even deleted, perhaps in error. 
  • Avoid the risk of liquids being spilt into the laptop, this could cause a major problem with data recovery
  • Do not use or locate your laptop near an open, ground floor window

 

You can also

© 2004-8 Working for an MP