Loss of sensitive data.
Theft of an unencrypted laptop from premises.
Undertaking issued to ensure that policies relating to the encryption of portable media devices are checked and upheld.
Reason for action
Despite the data controller having a policy in place to ensure that all such devices were encrypted, this laptop had not been, nor had it been identified as a security risk, despite having no other form of protection.
01 April 2011.