You are a senior information security manager for a federal agency. You received a phone call from an employee stating that his laptop was stolen from his workstation. He tells you that the laptop has...

You are a senior information security manager for a federal agency. You received a phone call from an employee stating that his laptop was stolen from his workstation. He tells you that the laptop has at least 30 cases with Social Security numbers of individuals he has been working on.

How would you handle this security incident?

What is the first thing you should do?

How would you retrieve/destroy the data?

You may have an internal thief—what would you do to find out who stole the laptop?

What security violations have been committed? How would you prevent this from happening again?