Industry


Ads by TechWords

See your link here


C. J. Kelly's picture
C. J. Kelly

A Day in the Life of an Information Security Officer

No expectation of privacy. Period.

Several people forwarded this article to me today.  Here's a quote from it:

"Most companies are very clear with the Internet-use policies. The company owns the computer system and the network. Clearly, there is no expectation of privacy on the part of the workers," Newman said.

The emerging market is called "secure content-management software" and includes monitoring for such things as web surfing, email, IM, and even keylogging abilities.  A soon to be $6.4 billion market in 2007, according to the story.

 

But, here's the scary part for you users out there who love e-Bay and personal email.  Recent court cases have sided with the corporation, not the people.  There is no expecation of privacy any more. 

 

While some companies are understanding of their employees need to use the phone or email for personal work because we all have children and spouses and hectic schedules,  be aware that anything you say in an email may be read by your boss or someone else at your company.

 

My suggestion is to only use your cell phone for personal communication and don't use email.  Don't shop online either.  Just say no to the Net when at work.  (Now, if only I could take my own advice).

 

 

What People Are Saying

Don't feel too bad, C.J.,

Don't feel too bad, C.J., it's not practical or possible for most of us to avoid Internet usage at work now. But the gross lack of enforcement by the FTC is part of the privacy problem. Most financial companies know they stand almost 0% chance of any sanctions from the FTC for lack of due diligence, or for overstepping privacy boundaries. My advice, use the Internet at work, but just like C.J. said DON'T expect privacy and don't say anything you wouldn't want repeated over and over again.

There is a big difference

There is a big difference between "must" and "may". Many companies "may" allow personal use of their Internet connections. The company I work for does. But if they ever said "hey--we're capturing and reviewing everything you do", I wouldn't have any issues with that. My behavior would certainly change (no more reading CNN.com at lunch), but I wouldn't feel that my privacy was violated. At the end of the day, it's their resource, not mine. That's why the court doesn't side with an employee.

"Why "must" companies allow

"Why "must" companies allow some level of privacy?" You answered your own question. In many companies, the line between personal and work life is pretty much gone. Employees are expected to be available for work at all hours, in many cases working from home. When companies are so intrusive on personal time, they need to be flexible in the other direction as well. Otherwise as you pointed out, the employees may go elsewhere.

Being a IT manager for 150+

Being a IT manager for 150+ computer office, our policy is for employees to be reasonable and responsible. We don't care if email and/or IM is used for limited personal things, but the caveat is that all information is stored for 3 years. No one is going to look at their data unless given cause to have to look at it.

Why "must" companies allow

Why "must" companies allow some level of privacy? If I'm the owner of a company and I've laid out thousands (at a minimum) of dollars to buy PC's, set up a network, pay an ISP, and pay employees to do work for me, why can't I set the rules on how MY equipment can be used? If an employee didn't like the rules, they would be able to make a change....in employer.

I would say that companies

I would say that companies MUST allow atleast some level of privacy to their employees. May be they can set up a email monitoring software and track only those activities that might end up with breaching the company's data. Not giving any privacy to employees might end up in a unsatisfactory work environment.