Body
Introduction
University-owned computers and other technology devices must be reported immediately when they are lost, missing, or stolen.
SCSU-managed computer hard drives are encrypted. However, encryption does not remove the need to report a missing device. Prompt reporting allows SCSU Public Safety and Information Technology Services to document the incident, attempt to locate or secure the device, evaluate any potential data exposure, and update university inventory records.
This procedure applies to university-owned technology devices, including:
- Laptop and desktop computers
- Tablets
- Mobile phones
- Other portable devices managed by SCSU
Instructions
What to Do if a Device Is Stolen
1. Report the theft to law enforcement
Report the stolen device to the law-enforcement agency responsible for the location where the theft occurred.
- If the theft occurred on campus, contact SCSU Public Safety.
- If the theft occurred off campus, contact the appropriate local law-enforcement agency.
Request the police incident or case number associated with the report.
2. Notify SCSU Public Safety
If the theft was reported to an off-campus law-enforcement agency, also notify SCSU Public Safety.
Provide Public Safety with:
- Police incident or case number
- Name of the responding law-enforcement agency
- Date and approximate time of the theft
- Location where the theft occurred
- Description of the device
- SCSU asset tag or serial number, if available
- Brief description of the circumstances
3. Contact HuskyTech or Information Technology Services
Contact HuskyTech or Information Technology Services as soon as possible. Provide the police incident number and all available information about the missing device.
Do not delay contacting IT if the police incident number, asset tag, serial number, or other information is not yet available. The missing information can be added to the support ticket later.
What to Do if a Device Is Lost or Missing
If a university-owned device is lost or its location is unknown:
- Contact HuskyTech or Information Technology Services immediately.
- Provide the device information and its last known location.
- Explain when and where the device was last used or seen.
- Notify SCSU Public Safety if theft is suspected or if directed by ITS.
ITS will document the report and coordinate the appropriate response.
Information to Provide
Provide as much of the following information as possible:
- Name and StarID of the person assigned the device
- Department
- Device type
- Manufacturer and model
- SCSU asset tag
- Serial number
- Device name, if known
- Date and time last seen
- Last known location
- Whether the device is lost, missing, or confirmed stolen
- Police incident or case number, if applicable
- Law-enforcement agency that received the report
- Brief description of what occurred
- Whether the device may have contained university data
- Contact information for follow-up
Missing information should not delay the initial report.
Device Encryption and Data Protection
SCSU-managed computer hard drives are encrypted to help protect information stored on the device.
Even when a device is encrypted, it must still be reported immediately. ITS and Information Security will evaluate the circumstances and determine whether additional security measures are necessary.
Employees and support staff should not independently determine that an incident presents no security risk based solely on device encryption.
If the Device Is Recovered
If the device is found or returned:
- Do not immediately resume using it.
- Contact HuskyTech or ITS.
- Reference the original TeamDynamix ticket.
- Provide information about where and how the device was recovered.
- Follow ITS instructions before reconnecting or using the device.
ITS may need to inspect the device, confirm its management status, or complete other security actions before returning it to service. For ITS Internal Procedure for Lost Stolen Devices