Laptop Security Policy

If wireless communication is permitted the laptop should be secured by following the good practice guidelines provided by NHS Connecting for Health Logical security measures Full disk encryption should be used with laptops whenever possible Where full disk encryption is not possible, an acceptable form of encryption should be provided at file or directory level to enable sensitive data to be encrypted whilst at rest Laptop BIOS passwords should be used to prevent BIOS settings from being changed Laptops should be configured so that they cannot be booted from external media when in normal use Two factor authentication should be used to control access to laptops wherever possible Where two factor authentication is used, ensure that the token is not stored or kept with the mobile device Implement procedures and processes in relation to the provision and maintenance of anti-virus and other security software on laptops, lockdown of the desktop on laptops and other appropriate measures Tamper-proof labels should be fitted to laptops for asset identification, and to disk drives and ports which should not be used Other good practice security measures Do not leave laptops unattended in car boots overnight Do not leave laptops unattended in insecure areas, for example meeting rooms next to areas of public access, and hotel rooms where others may have access..