S 4.28 Software reinstallation in the case of change of laptop users

Initiation responsibility: Head of IT, IT Security Officer

Implementation responsibility: Administrator

If the user of a laptop changes, it must be ensured that this laptop does not contain any data requiring protection or computer viruses. The data may be deleted by complete overwriting or with the help of specific deletion programs. An up-to-date anti-virus program must then be run. Both procedures must be performed for all data media used such as hard disk, diskettes, CD, or USB sticks.

However, it is recommended that the mobile PC's hard disk is re-formatted and the required software and data is then reinstalled. The items to be observed in doing so are described in S 4.235 Comparison of stored data on laptops.

Review questions:

• Has it been ensured that any data requiring protection is deleted securely when the user changes?
• If the laptop is not re-installed upon user change: Has it been ensured that neither the system nor any of the connected data media contain malware?