I have been asked several times in recent months about addressing risks of warranty repair service of laptops/tablets. With each of these situations, the question boiled down to the same underlying issue: non-removable storage. “It depends” has been my standard response, as there are many key factors to accurately framing the response. Organizational policies which defines their risk appetite and/or external regulations typically characterize what can be done.
Article Link: InfoSec Handlers Diary Blog