Originally Posted by Escapee (Post 34574386)

Documents Restricted or Secret must not be left out on desks whilst unattended, the reason is that Escorted visitors may not have the required level of clearance to view those documents.

Originally Posted by Uncle Peter (Post 34574587)

Exactly, that's the most worrying part: this person was actually authorised to take hard copies of Top Secret protectively marked documents out of the office.[...]

Originally Posted by Raistlin (Post 34574609)

I'll think you will find that they were most certainly NOT authorised to take that particular document out of the office. Their authorisation will have extended only as far as to grant them access to it and to retain it (in an appropriately secured container/location).

I wouldn't want to try to pre-empt the outcome of any investigation, but I would be quite happy at this stage to guess that the decision to remove that document from its appropriately secure environment was most likely down to the individual and would almost certainly not have been authorised.

Originally Posted by Xaccers (Post 34574422)

Escorted visitors should never be left alone in the first place. I know I never was until my full pass arrived.

True, but some of these pesky visitors have a habit of wandering or seeing things they shouldn't.

Difficult to work on a document if it's locked away ;)

You know I meant locked away when away from your desk, when we have had visitors in my previous employment all restricted documents had to be put out of sight.

We have software at work which prevents unauthorised access to the USB ports.
If people want files transferred they have to submit a request and we do it for them.

That would be a bit difficult for our IT department, because I wouldn't give them the administrator password to enable them access to the system. As design authority I am currently the only person in the UK with authorisation to use the password. The data I move from these systems is not restricted nor is it any use to anyone else.

I could just imagine how efficient it would be asking the IT department x amount of times a day when I need to put data on a memory stick. I had that fiasco in my last employment, I played their little game until they got fed up with visiting me a dozen times a day. In the end they just gave me the required access rights, it's all about balancing security against common sense.

Exactly, think about how people are going to use the system, and built the security around that to ensure no breaches.
As you've demonstrated, simply telling someone not to do something isn't good enough, you have to prevent them from doing it.

Originally Posted by Raistlin (Post 34574741)

And that's the problem.

In all walks of life you generally find that the more senior people are the less they think the rules and regulations apply to them. It's also the case that fewer people are prepared to stand up and challenge them about it as well!

As for the 'encrypted electronic' v 'paper' debate. It is my suspicion that paper files of this type (although this incident may suggest the contrary) are traditionally easier to account for, store, and control, than electronic copies.

Originally Posted by The BBC

More confidential government files have been found left on a train.
The Independent on Sunday says it was handed the documents, which cover fighting global terrorist funding, drugs trafficking and money laundering.
The files, which relate to a meeting of financial crime experts to be held this week, were found on a train bound for London's Waterloo station on Wednesday.

Originally Posted by Cobbydaler (Post 34575562)

And again... :rolleyes:



Link