September 14, 2007 — CSO —
how employees could get around the system restrictions imposed by their
IT security teams. I will give the Journal some credit; it did point out the risks involved with sidestepping these restrictions and how to do so safely, but the fact that it feels the need to publish security workarounds really amazes me. I can just imagine the employee thinking this encourages....
1. How to send giant files. â¬SI canâ¬"t help it that these customer databases are so large,⬠the employee thinks. â¬SThere arenâ¬"t enough hours in the day for me to do the customer analyses my boss wants, so I have to bring those files home. Our stupid IT department has locked down our USB ports and wonâ¬"t let me send anything on e-mail larger than 2MB. Why does my boss need to know how many customers have Social Security numbers that begin with 302 anyway?â¬
2. How to use software that your company wonâ¬"t let you download. â¬SInstant messaging software, for example? Easy. Iâ¬"ll just use a Web-based version of IM. What do you mean, we have to retain all our IM communications to meet e-discovery and data retention regulations? Sox⬦thatâ¬"s a baseball team, right?â¬
3. How to visit the websites your company blocks. â¬SI canâ¬"t believe
my company wonâ¬"t let me visit that online gambling site. How else am I going to pay back my bookie? Never mind I have to get back to managing our Âcustomersâ¬" healthcare claims.â¬
The Journal goes on from thereâ¬how to clear your tracks on your work laptop, how to search for your work documents from home, how to store work files online and so on.
By all accounts the staff of the Journal is very concerned over what will happen when Rupert Murdochâ¬"s News Corp. takes over. My advice to
Mr. Murdoch: Pray that the Journalâ¬"s staff isnâ¬"t reading its own articles or you may need to bring in a crack security team to get things under control. Maybe there is a benefit for at least one CSO in all
of this?
Data Center Directions Virtual Conference
Attend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.
Maximizing Site Visitor Trust Using Extended Validation SSL
Now with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in the free VeriSign white paper.



