Information Sensitivity and Employee Sanctions: Getting the Message Across
With increases in data breaches and the realization that (as part of that) employees have not been following appropriate security measures, there is a strong need to get the complete attention of staff and define how to make them more accountable.
When significant breaches occur, accusing fingers often get pointed at the Chief Information Officer and Chief Security Officer (if a firm has been forward-looking/financially supportive enough to engage one). Ultimately, they are the ones responsible for the mishaps, mistakes and poor planning of their organization when these events occur. A lot of blame gets heaped upon their shoulders, but in the aftermath analysis of what went wrong, it has been noted that the misdeeds that put them at center stage are frequently associated with damaging employee actions and non-actions.
How does a company handle this problem? When these events occur--and with repetition--there needs to be an introduction or reintroduction to rules and repercussions that apply to all employed bodies within an organization, including officers and contractors.
Not permissible
Companies that work with data and are responsible for its security, privacy and protection need to have a policy in place--one that provides an umbrella of reasons for employee sanctions, leading up to possible termination.
While employees are an amazing asset to an
Please log in or sign up below to read the rest of the article.
|
"Put your hand on a hot stove for a minute, and it seems like an hour. Sit with a pretty girl for an hour, and it seems like a minute. THAT's relativity." - Albert Einstein |




