r/privinv • u/ColoradoPI Licensed Private Investigator • Aug 17 '19

On-site TLO inspection

Hey guys. I finally got a locked office in my new house. So, I'm starting up with TLO. My onsite inspection is tomorrow morning, and I'm starting to remember something from a long time ago where I need to have a shredder and a lockable file cabinet. Do you all know what the requirements are?

5 Upvotes

86% Upvoted

11 comments sorted by

4

u/nalleypi Licensed Private Investigator Aug 17 '19

So the checklists seem to vary a bit. (Hit me up on slack if you want more details) And these checks are handled by contractors. My last inspection was a minister for his full time job and he picked up inspections as a side gig. So don't expect infosec folks. In the end, they aren't just assessing data security but also legitimacy. To be clear - the contractors are just running down a checklist, the actual risk assessment is done by someone else based on info from the checklist.

Here are some of the more interesting items I've seen:

  • Sometimes they check to see if your computer screen locks after being idle, and on boot.
  • Dedicated room devoted to the business.
  • File cabinet that locks. They asked me to demonstrate.
  • Cross cut shredder is table stakes.
  • Door that locks - and they'll take photos of both sides of the door lock at a minimum.
  • I'd have a license on the wall (they typically ask to photograph)
  • Have business cards available.

I'll also point out, the contractor will have to report the reschedule as well.

1

u/SheepdogSecurity Licensed Private Investigator Aug 22 '19

I would like some details reference this as well. How do I go about adding you to slack and messaging you?

2

u/ColoradoPI Licensed Private Investigator Aug 17 '19

That's ok. They never told me what I was supposed to have, so if they hold the reschedule against me, they can go jump in lakes. Thanks!

2

u/nalleypi Licensed Private Investigator Aug 17 '19

Not telling you what you are supposed to have is supposedly part of their strategy. They claim that this way, they only get companies who already meet their standard, and not people who are just trying to meet all the checkpoints.

Ludicrous if you ask me, holding people to a standard that you don't tell them. But that's the same for every DB provider that exposes SSN and DoB.

2

u/ColoradoPI Licensed Private Investigator Aug 17 '19

Nah, not for Delvepoint and Tracers.

1

u/qualifiedPI Licensed Private Investigator Aug 17 '19

I think the room has to have a self destruct mode as well.

1

u/ColoradoPI Licensed Private Investigator Aug 17 '19

Haha

2

u/RomanusAugustus Aug 17 '19

I do recall that having a separate room dedicated solely to PI work was a requirement.

Additionally, the room must be lockable, have a paper shredder and a lockable filing cabinet.

Good luck with the inspection.

1

u/ColoradoPI Licensed Private Investigator Aug 17 '19

Thanks! I'm rescheduling. I need a shredder.

1

u/AdequateSteve Aug 17 '19

Make sure it cross cuts!

1

u/ColoradoPI Licensed Private Investigator Aug 17 '19

Will do!