Problem
A contractor's workstation is shared with family members, exposing confidential campaign footage outside the controlled production environment.
Solution
Root Cause / Diagnostic:
Operating on shared domestic hardware without OS-level user isolation compromises physical and visual data security. When non-production users access an active editing workstation, pre-release media, unannounced product hardware, and sponsor assets become vulnerable to accidental disclosure.
Actionable Fix:
1. Require the contractor to configure a dedicated, password-protected OS user profile (macOS or Windows 11) with full disk encryption (FileVault / BitLocker) enabled.
2. Configure automatic screen lock after 5 minutes of inactivity requiring biometric or password re-authentication.
3. Store all active project media on an external hardware-encrypted drive (e.g., Samsung T7 Touch with fingerprint/password lock) that is disconnected when the editor leaves the desk.
Pro Tip:
Mandate full disk encryption and separate operating system user profiles in contractor service agreements to maintain baseline ISO/IEC 27001 physical workstation controls.
Operating on shared domestic hardware without OS-level user isolation compromises physical and visual data security. When non-production users access an active editing workstation, pre-release media, unannounced product hardware, and sponsor assets become vulnerable to accidental disclosure.
Actionable Fix:
1. Require the contractor to configure a dedicated, password-protected OS user profile (macOS or Windows 11) with full disk encryption (FileVault / BitLocker) enabled.
2. Configure automatic screen lock after 5 minutes of inactivity requiring biometric or password re-authentication.
3. Store all active project media on an external hardware-encrypted drive (e.g., Samsung T7 Touch with fingerprint/password lock) that is disconnected when the editor leaves the desk.
Pro Tip:
Mandate full disk encryption and separate operating system user profiles in contractor service agreements to maintain baseline ISO/IEC 27001 physical workstation controls.