Since I work for a Global Company in a information Security postion, I may a few insights to add. Statemachine talked about your information on company assets and how that information is now theirs. The reverse can be true also. If you brought in your own machine and put company data on it, theoretically, that machine belongs to the company. As we all know, even deleted, overwitten, zero-ed out data can be recovered (with different levels of labor respectively) from hard drives and other mediums. Companies will not and should not let you take your personal machines out of the building. This represents a avoidable risk to that companies intellectual property and corperate information. Email, files, software, and any other electronic communications methods that you use and/or provided by your company are theirs. This includes Cell phone converasations on company cell phones.
Most companies indemnify their employees. In other words, you, personally, would not get sued for an illegal act to commit fraud against customers using company assets. The company would. But, you would probably get fired in attemptng to settle the lawsuit.
A few things to remember:
PC does not mean Personal computer. It means Property of your Company.
Keeping Personal data on company assets is a big NO-NO.
Keeping Company Data on personal assets is a big NO-NO.
If you need something to do your job better, ask your company first.
If you need to bring in an asset you own, get permission and know the rules.
And the number one thing you can do: USE COMMON SENSE.
I know not every company follows these rules, mine does. They make sense, allbeit, sometimes difficult to follow.
CYA is a very good thing. If your using the CYA methodology, your already following the rules.
Slashdot Mirror
Since I work for a Global Company in a information Security postion, I may a few insights to add. Statemachine talked about your information on company assets and how that information is now theirs. The reverse can be true also. If you brought in your own machine and put company data on it, theoretically, that machine belongs to the company. As we all know, even deleted, overwitten, zero-ed out data can be recovered (with different levels of labor respectively) from hard drives and other mediums. Companies will not and should not let you take your personal machines out of the building. This represents a avoidable risk to that companies intellectual property and corperate information. Email, files, software, and any other electronic communications methods that you use and/or provided by your company are theirs. This includes Cell phone converasations on company cell phones.
Most companies indemnify their employees. In other words, you, personally, would not get sued for an illegal act to commit fraud against customers using company assets. The company would. But, you would probably get fired in attemptng to settle the lawsuit.
A few things to remember:
PC does not mean Personal computer. It means Property of your Company.
Keeping Personal data on company assets is a big NO-NO.
Keeping Company Data on personal assets is a big NO-NO.
If you need something to do your job better, ask your company first.
If you need to bring in an asset you own, get permission and know the rules.
And the number one thing you can do: USE COMMON SENSE.
I know not every company follows these rules, mine does. They make sense, allbeit, sometimes difficult to follow.
CYA is a very good thing. If your using the CYA methodology, your already following the rules.