Information Technology
UPDATE
Protecting Information on Portable Electronic Devices
Protecting customer, employee, and business information is critical to the mission and the credibility of the Postal
ServiceTM. It is also the right thing to do. Information stored
electronically is particularly vulnerable to theft, as laptops
fall into the wrong hands every day - at home, on travel,
even in the workplace. Guard your laptop at all times; don't
let it get stolen.
Handbook AS-805, Information Security, has been revised (Postal Bulletin issues 22190 and 22194) to strengthen Postal Service data protection policies and to more
clearly define employee and manager accountability for
protecting information. Below are guidelines for ensuring
you do your part in protecting yourself, your co-workers,
Postal Service customers, and the Postal Service in
general.
Managers:
• Do not approve an employee's request to purchase a
laptop unless it is clear that the employee cannot do
his or her job without one and the position allows the
device to be used off site or after hours.
• Do not allow employees to take laptops off premises
unless it is absolutely necessary and you know who
will be responsible for its safety.
• Before an employee removes a laptop from the normal work area, make sure that the employee knows
he or she is responsible for its safety and the business data it contains. Responsibility includes having
a place to secure the equipment when it's not being
used.
Employees:
• You are responsible for the safety of your laptop and
the data it contains.
• Always keep your laptop within sight or secured with
a cable lock.
• Do not check your laptop in your baggage on an airplane, train, or any other public transportation.
• If you must leave your laptop in your vehicle, keep it
out of sight in the trunk. Never leave it in a vehicle
overnight.
• Encrypt sensitive data on the hard drive, flash drive,
or other removable media. If in doubt, encrypt using
WinZIP, EFS, or an encryptable flash drive.
• Report any missing or stolen laptop or portable media immediately to your manager, by e-mail to
uspscirt@usps.gov, and to your local Inspection
Service office. If your laptop has been stolen somewhere other than Postal Service premises, report the
theft to the local police as well.
For more information, see the article, "Data Protection
Tips, Tools, and Requirements," in Postal Bulletin 22194
(11-23-06, pages 22-24 and 49).
— Corporate Information Security,
Information Technology, 1-18-07
| 
