@StaceyE: That's another can of worms, depending on HOW the monitoring is handled. Sometimes once a company gets on a device, it can be difficult to set limits to where it can go.
@smkinoshita.....I think if an employee brings their own device to access the company's network, it would be subject to the same rules/monitoring as it would be if they were using the company's PC. However, if someone is on their smartphone in the breakroom looking at something innapropriate (via their OWN data service) that should be a different story.
Well IMO predicting the future is not that easy right now. You have to analyze carefully. On you point on taking preventive action is a good thing but unfortunately for that even you cant predict at once.
I know one company which hired an SA who failed to indicate he was currently under prosecution and was eventually found guilty of a unlawful access to govt databases. Even after, the company would not take action to remove the individual. Individual was given probation by the court and the company viewed the individual as some form of IT security expert. Access was through use of a subordinate's account. In short, the company saw it as a benefit / leverage over the employee.
Even investigating an employee has limitations and liabilities which the company needs to consider. Generally, they are not trained law enforcement in legal investigative techniques and have extremely limited investigative authority. I believe personal accounts and credentials (whether that is FB, banking, or other social networks) is a personal privacy right. There are free proxy servers which companies can use to block sites or protocols even in the smallest IT environments. Asking their credentials, because the company did not prevent unauthorized access, is lame and as it is "personal" a violation of their legitimate expectation to privacy.
I'm interested by this apparent consensus that password-protected personal data becomes company property if someone logs on using a workplace network. I'm not sure what the courts have said about that; I'd be interested to hear from attorneys.
Does this include banking information, for example? Personal email accounts? Phone directories? What if someone uses their own device, but the company's wireless network? And how does it sit with the notion that employers should not be able to demand passwords - at least in that situation, you know you are handing over the keys.
Agreed that trying to predict whether an employee might turn into a crook is a guesstimate. A company may have a perfect record of employee good behavior; then someone could step out of nowhere to ruin it.
That said, if a company has had a record of criminal employees -- or even of employees who violate the rules repeatedly -- then something is wrong with the hiring process, and it may be possible to estimate the likelihood of insider malfeasance occurring again.
Determining blame during any such investigation will result if time consuming defense actions and expensive fees to lawyers, security analysts, experts and more.
The problem may be just how much "preventive" action should take place before any breach happens? What's the cost benefit ratio and what is the probable odds of such events happening to your company. It's all a crap shoot basically. Predicting the future and guessing how much should be spent on prevention is just a wild guesstimate.
Oh, and don't put anything on the net you wouldn't want to see on the front page of the New York Times, and certainly not during business hours. Big Brother may be busy, but you can bet Little Brother's looking over your shoulder.
Exactly! Monitoring software is very sophisticated these days and can extend to your social media profiles as well. Recording is often covert and can be triggered by certain actions or set to record everything.
The ThinkerNet does not reflect the views of TechWeb. The ThinkerNet is an informal means of communication to members and visitors of the Internet Evolution site. Individual authors are chosen by Internet Evolution to blog. Neither Internet Evolution nor TechWeb assume responsibility for comments, claims, or opinions made by authors and ThinkerNet bloggers. They are no substitute for your own research and should not be relied upon for trading or any other purpose.
Social media has been with us for a decade -- but employer policies and the law are anything but firm about the most appropriate usage of this powerful tool.
Businesses often struggle to decide which domain to use. When it comes to purchasing a domain name, you have plenty of extensions to choose from, ranging from .com and .net, to .me, and even .mobi. But which one should you pick?
I've been writing about how the next evolution of the Internet might just be an advertising revolution, and how corporate IT can stay involved as the enablers and providers of the technologies that make this possible.
In the 1970 science fiction thriller Colossus: The Forbin Project, two giant supercomputers from the United States and Soviet Union secretly join forces to take control of the collective nuclear might of the two countries. In the film, the two machines discover each other's existence, communicate back-and-forth, share their collective data, and cut their human creators out of the process. It is the ultimate example of machine-to-machine communications, or M2M.
New York's Metropolitan Transit Authority is conducting a pilot test of digital kiosks to guide subway users to where they want to go more efficiently and at lower cost.
The whole Amazon.reader debate is a double-stupid. It's stupid to think that there's any e-book buyer who doesn't know Amazon's URL, and it was stupider to let ICANN launch the whole free-form TLD initiative to start with.
While NFC's original goal was to enhance mobile commerce applications, it is finding its way into a number of other uses, which is creating both opportunity as well as challenges for IT departments.
Enterprises would like to move to cloud computing but are hesitant because they are concerned about providers’ ability to secure company data. Here are some tips that help to ensure that if breaches occur, the business is not left holding the bag.
Edmunds separates customers into segments based on the info it collects on its site and from partners, and uses that to push out custom content, said Brian Baron, director of business analytics for Edmunds.com, at Predictive Analytics Innovation Summit.
The automotive website uses propensity modeling to target ads and customer registration forms, said Brian Baron, director of business analytics for Edmunds.com, at Predictive Analytics Innovation Summit.
Expert Integrated Systems: Changing the Experience & Economics of IT In this e-book, we take an in-depth look at these expert integrated systems -- what they are, how they work, and how they have the potential to help CIOs achieve dramatic savings while restoring IT's role as business innovator. READ THIS eBOOK
your weekly update of news, analysis, and
opinion from Internet Evolution - FREE! REGISTER HERE
Wanted! Site Moderators Internet Evolution is looking for a handful of readers to help moderate the message boards on our site as well as engaging in high-IQ conversation with the industry mavens on our thinkerNet blogosphere. The job comes with various perks, bags of kudos, and GIANT bragging rights. Interested?
To save this item to your list of favorite Internet Evolution content so you can find it later in your Profile page, click the "Save It" button next to the item.
M2M: Rise of the Machines? Not Yet David Weldon In the 1970 science fiction thriller Colossus: The Forbin Project, two giant supercomputers from the United States and Soviet Union secretly join forces to take control of the collective nuclear might of the two countries. In the film, the two machines discover each other's existence, communicate back-and-forth, share their collective data, and cut their human creators out of the process. It is the ultimate example of machine-to-machine communications, or M2M. CLICK FOR MORE
M2M: Rise of the Machines? Not Yet David Weldon In the 1970 science fiction thriller Colossus: The Forbin Project, two giant supercomputers from the United States and Soviet Union secretly join forces to take control of the collective nuclear might of the two countries. In the film, the two machines discover each other's existence, communicate back-and-forth, share their collective data, and cut their human creators out of the process. It is the ultimate example of machine-to-machine communications, or M2M. CLICK FOR MORE