My company's infosec policy contains a statement to the effect that I am encouraged to bring my laptop home with me to that it never leaves my possession/control.
This doesn't seem useful, from a security perspective (I can't think of any pros, other than being able to say that it decreases the average distance between me and my laptop...), and has definite cons:
- The company has no knowledge of or control over the physical security of my home
- There's no guarantee that when I go home, I keep my laptop with me (I could leave it in the car, or leave it at home while I went somewhere else)
- Many (most?) employees use public transit to get to and from work, introducing lots of potential places where theft could occur
Is there anything to this that I'm missing, or is this just bad security practice?