Today, one of our developers had his laptop stolen from his house. Apparently, he had a full svn checkout of the company's source code, as well as a full copy of the SQL database.
This is one massive reason why I'm personally against allowing company work on personal laptops.
However, even if this had been a company owned laptop, we'd still have the same problem, although we would be in a slightly stronger position to enforce encryption (WDE) on the whole disk.
Questions are these:
- What does your company do about company data on non company owned hardware?
- Is WDE a sensible solution? Does it produce a lot of overhead on reads/writes?
- Other than changing passwords for things that were stored/accessed from there, is there anything else you can suggest?