Security done right.

So I'm on a short-term engagement with %client%, where %client% is located in a secure building. Access to the building is controlled by swipe cards plus fingerprint reader, so I needed to sit for a photo and to have my fingerprint taken. I asked the following question of the security guy who was taking my picture, not really expecting an answer:

"What's your data retention policy on fingerprint information? I'm on an 8-week contract and don't really want my fingerprint on storage here until time immemorial."

Without even missing a beat, security guy responds "SOP is that your fingerprint data is scrubbed from the database as soon as we receive the request to terminate your building access."

I'm telling you, you could've knocked me over with a feather. Talk about being on the ball.

Comments

[joe]

Now whether or not it is done.... That is another matter entirely... How do they audit the cleanup? How do you validate their audit?

[Laura E. Hunter]

Oh sure, I'll concede that point in a New York minute. I was just impressed that I even got the initial response, rather than the blank stare I was expecting. :-)