Five Warning Signs Your Security Policy Is Lacking
Warning signs of a weak security policy from SunGard Availability Services.
Yesterday, Cindy Bates, Microsoft vice president of U.S. SMB, provided an outline of ways to lessen the security risks that come with working remotely. But as regular readers of my blog know, I'm a big proponent of security policies and security education as the primary ways to best protect the network. So, of course, one of the questions I asked Bates was what should be included in a company's formal security policy in regards to working remotely.
She pointed out that as each business is unique, there is no one-size-fits-all formula to develop a security policy. However, there are important elements to consider that will assist in meeting the business' and employees' needs, whether in the office or working remotely, while maximizing security:
Research conducted by Microsoft found that many employees are turning to social networks to enable off-site collaboration, but social networks are rife with security risks. On the other hand, social networking channels are great places for SMBs to build brand awareness and engage with customers. As Bates told me:
This development in communication practice often makes completely banning social media use during work hours unrealistic; however, these sites are not secure portals for conducting business. A conversation between co-workers that is conducted via a social network regarding a confidential new product launch, for example, is ultimately the same as openly discussing the product in a public place-or even disclosing it to the competition.
SMBs have a responsibility to clearly convey a social media policy to all employees, including remote workers. Business owners should set specific parameters around the types of communication and information that can be shared via public social media channels and should consider investing in private social technologies that enable collaboration.
She suggested cloud-based solutions as a more secure way for remote workers to collaborate and communicate with office-based and other remote-working co-workers.
All this talk about remote work makes me want to pack up my netbook and head to my favorite coffee shop. Who knows? Maybe that's where I'll write Monday's blog post.