Protection of data in Notebook Computer and Software Installation in Note Book Computer were not effectively implemented.
During auditing BD/AE, the organization has Notebook computer in use as mobile device for working outside organization’ premises. It was found that:
1) Lenovo ThinkPad E130 No. In360-NB-006 has some data files in Drive D:; e.g. AIA folder, Falcon Folder, LionAir folders. These files are created between Dec 13 to Apr 14.
2) The Notebook Dell Latitude No. Tele-NB-004 has some data files in Drive D: since year 2011 e.g. AAPC 20011 – DRTV folders, BD folder, Presentation 24 Feb 2011. It also have the software not listed in List of Authorized Software; e.g. NCH Software Suite, ProShow Producer, WonderShare, YTD Video Downloader. .
There was no security measure how to protect these risks.