@george-k said in Half-billion:
Knowing that the guy who dropped off the computer signed an agreement stating that if he doesn't retrieve it in 90 days, it becomes the property of the computer repair guy, would you ever trust that guy to be on the board of an energy company?
Sure, why not? I’m not going fire someone from a Board of Directors just because that some one forgot (or even deliberately decided not) to pickup a computer from some repair shop.
If you want to talk information security in a business setting, the security is already breached when you (1) store confidential information on computer where you’re not supposed to, or (2) give a computer with confidential information to a repair shop outside the business’ established IT process.
A Director forgot to pickup his kid’s old Mac or his own old gaming PC from a repair shop is not a problem. That Director storing confidential information on his kid’s Mac or gaming PC and give that Mac/PC to an outside repair shop — that may be a problem.