In Brief

Call Centers: Risk Assessment Reminders

A few questions to help make sure your call center security plan covers the necessary bases.

By Malcolm Wheatley

May 12, 2008CSO — Sample questions to help determine appropriate protective measures for a call center. In some cases the company may decide that a particular issue is outside its scope of responsibility—but clearly security can play a role in keeping a safe, efficient and trusted workforce in place. (For more detail, see the in-depth article Call Center Security: How to Protect Employees and Customers).

What data will call center agents need to access? Are full-fledged PCs necessary for these tasks, or are terminals sufficient? What other policies and technical controls are required to prevent removal or copying of this data?

Are sensitive physical documents (possibly including operational procedures) appropriately secured and labeled?
Does the facility have an adequate physical access control system?

Is the physical environment of the call center (parking lot or garage, incoming roads and neighborhood) safe for employees at all hours of operation? Are additional lighting, fencing, call boxes, surveillance systems or security personnel required?

Do all employees have appropriate means of safe transportation to and from work?

What other businesses operate in the area and at what hours? In what ways (positive or negative) could these businesses affect security issues?

Are employees trained in how to handle incidents (including intrusions, threats and medical emergencies)?

Does the sensitivity of call center information necessitate background checks on new or existing employees? Does the organization have the necessary policy and capability for such investigations?

Do the center's security controls meet all applicable regulatory requirements?

Source: CSO reporting

Other stories by Malcolm Wheatley

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Data Center Directions Virtual Conference

Data Center VCAttend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.

» Learn more and register here

WHITE PAPER
Maximizing Site Visitor Trust Using Extended Validation SSL

VeriSignNow with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in the free VeriSign white paper.

» Read the Paper

Featured Sponsors
Sponsored Links

CA's IT Security centralizes your identity management to turn security into a proactive, business-building tool

How Are Open Source Development Communities Embracing Security Best Practices?

Digital Identity Protection and Data Security Get Personal

Simplify your data center with Juniper Networks. View the webcast

Managing SSL Security in Multi-Server Environments

The Latest Advancements in SSL Technology

How to Offer the Strongest SSL Encryption

Forrester Total Economic Impact (TEI) report: Save Millions in Fraud Losses.

Get in Compliance With Government Data Regulations

Taking the Botnet Threat Seriously

Any company can promise identity protection. Only Debix can prove it

Welcome to the age of Service-Oriented Security (SOS)

Enabling Compliance with Converged Mainframe Security and Storage

5 Steps to Secure Outsourced Application Development

Efficient - Flexible - Compliant

Envision Identity-Based Access Control for the Datacenter

Using Likewise to Comply with PCI Data Security Standard

When Customer Relationship is Everything, Businesses Bank on SSL Solutions

The Case for Business Software Assurance ~ Securing Your Applications

Maximizing Site Visitor Trust Using Extended Validation SSL

Solving Online Credit Fraud Using Device Reputation

Understanding Data Location is Imperative for Data Loss Prevention

Secure your virtual and physical environments with the same software

Manage your IT more effectively

IDC Defines an Identity and Access Management Submarket

IDC Defines an Identity and Access Management Submarket for Managing Privileged User Accounts and Meeting GRC Requirements

Everything Today's CISO Needs to Know About Using SSO to Succeed in the Web 2.0 Era