Yesterday you had an interesting conversation with one of your loyal customers, Dan Martello. He asked you the following question: "If I find a digital camera on the street is it OK to look at the contents, or am I invading the owner's privacy?" You have a lengthy debate and decided that in some scenarios it is an invasion of privacy to be looking at someone else's photos and is similar to looking in their windows.

In other scenarios, it is not an invasion of privacy if you do not know the person and it is the primary way to identify the owner to return the camera, similar to looking in a wallet.

As you are cleaning your business, you find a 30 gigabyte thumb drive and you know that it probably belongs to one of your valuable customers and contains their sensitive information. What do you do?

What security concerns are associated with the thumb drive? How could information security policies or an information security plan help your business with this type of situation?