Workplace Security

[bluedragon2]

I just recently found a thread in another forum, thread68-710925 , in which the user was complaining about his boss's views on securtiy. I made a quick comment to him about the lack of security and what could come of it.

I thought I would start this thread to for those of you who have any stories to share or specific cases. I would like to use this thread as a reference for those in the above thread.

Thanks

Blue

If I wasn't Blue, I would just be a Dragon...

 

[chiph]

Physical security:
====================

Last job, a number of employees found that items on their desk were being stolen. In one case, a CD player was taken, and then the next day the jewelbox for the disc that was in the player was stolen.

Management installed hidden cameras facing the exits. Under North Carolina law, moving items from one area of the office to another is not a crime (aka the "phantom redecorator&quot. But carrying them out the entrance to the building makes it theft.

The cameras were able to catch a part-time security guard employed by the property owners as the culprit. When the police searched his apartment, they found almost $600,000 worth of goods piled up, including software manuals, phone books, and the missing CD player. He was obviously suffering from kleptomania, and was sentenced to treatment.

Data security:
===============

A friend who owned a consulting company had a salesman who wasn't performing. They fired him, asking for the company property back (cell phone, laptop, etc). It turns out that he had kept a copy of the client list, and continued making sales calls on them, but for his new employer.

When they received the laptop, they found that he had attempted to erase the contents of the drive. Using a file recovery tool (they were curious what he was covering up), they discovered he had a spreadsheet that listed what he would have made if he sold the company services, vs. what he would have made selling a competitor's services to the same potential client. Since he knew both company's pricing structures, he was able to maximize his personal income by selling the services that would net him the most money, even if it were from a competitor.

Chip H.


If you want to get the best response to a question, please check out FAQ222-2244 first

 

[bluedragon2]

Thanks chiph,

Both are great examples...especially the one about the salesman. I run out of breath trying to explain that threats do not just come from the outside. I was in a meeting arguing with a person who was against logging the actions of users on a paticular network. His idea was that we wouldn't have hired them if we didn't trust them.

Thanks for your post...



Blue

If I wasn't Blue, I would just be a Dragon...