Job: security

This IT security pilot fish takes his job of defending the network seriously -- and that can mean enforcing some tough standards.

"I managed to get a network security policy passed that intentionally disallows modems on the network without preapproval by IT security," fish says. "This security policy has been reviewed by all IT directors and managers, and approved by the executives."

But a week after the policy is adopted, fish gets an e-mail from an IT director:

"I just approved a request from an IT manager for two dial-up modems for a project, I assume for vendor support. Is this OK? Let me know if not, thanks."

Fish isn't happy that the modems were approved for purchase without the required security review. But he knows his place in the food chain and doesn't bring that up.

He also knows that a modem may be the only way to communicate with some pieces of hardware. So he replies to the director: "IT security is OK with it as long as the modems remain turned off when not needed, and turned on only when the vendor needs to connect to the system."

IT manager, who is cc'd on the e-mail chain, chimes in: "Is that realistic? If the maintenance is scheduled, that would work, but what about nonscheduled work?"

Sighs fish, "I clarify why it is essential and quote policy to all in the e-mail chain.

"I also contemplate that it may not be worth showing up in the morning."

Sharky wants to contemplate your true tale of IT life. Send it to me at sharky@computerworld.com. You'll get a stylish Shark shirt if I use it. Add your comments below, and read some great old tales in the Sharkives.

Now you can post your own stories of IT ridiculousness at Shark Bait. Join today and vent your IT frustrations to people who've been there, done that.