|
Your shout: Security is everyone's responsibility, e-recycling |
|
|
|
Source: ComputerWeekly.co.uk - Posted by Benjamin D. Thomas
|
Why is it the IT director's job to prevent careless employees from leaving PDAs in taxis or laptops in their cars? Why is it the CIO's fault when an ignorant employee opens an executable e-mail attachment, releasing a rampant virus?
The equivalent is blaming the telecoms manager when an employee is tricked into giving away a security code or password in a phone call or reprimanding the post room when someone posts a confidential document to the papers.
Installing a general duty of care in employees - covering everything from passwords to shutting the door behind them when they leave at night - is a shared responsibility of all senior management, led by one person at board level. This director (call him what you will) works with facilities management on physical security; human relations on security awareness training; the legal department on compliance; IT on technical security; and creates awareness of employees' duty of care through line managers.
Read this full article at ComputerWeekly.co.uk
Only registered users can write comments.
Please login or register. Powered by AkoComment! |
