Security is the degree of resistance to, or protection from, harm. Workplace questions should only be tagged with this if they relate to actual security concerns (physical or digital) and are specific to the workplace. See extended tag info for usage guidelines.

learn more… | top users | synonyms

2
votes
1answer
286 views

Should companies pay employees for responsible disclosures?

I recently discovered a major security vulnerability (SQL injection) in one of my companies projects in my free time. I'm working there as a developer, not as a security researcher, but after ...
-1
votes
3answers
130 views

How to better track identities within company? [closed]

One of my responsibilities at work is to perform periodic user access reviews. A frustrating problem has been inconsistent to poor documentation,such as it becomes difficult to map users to roles. ...
51
votes
6answers
8k views

How do I prevent my manager from abusing a contract specification that breaches my privacy?

I'm employed as a software developer. In my country the employer is not allowed to monitor your activities due to privacy laws. However, due to the nature of some of our clients, our company is ...
-2
votes
2answers
254 views

Lost my company ID card on first week of work. How to report this to my supervisor? [closed]

Update Luckily, a colleague found my card and handed it back to our secretary. Seems that I forgot it in a meeting room. Thanks everybody for the suggestions anyway. I started to work in a new ...
1
vote
2answers
635 views

My manager wants to create an administrator account on my work computer that only he has the password to [closed]

This is on a Windows 10 system, that is provided to me by work. They want to create an administrator account that only my manager will have the password to. The thing is, this isn't from IT and it's ...
1
vote
3answers
425 views

Does my employer have the right to phishing a personal account for security purposes? [closed]

A few days ago I received a LinkedIn invitation email from some other employee of the company. I clicked the email link to check this person LinkedIn profile, I logged in with my personal account into ...
87
votes
9answers
16k views

Should I report this workplace thievery?

For the last 6 months, some of my coworkers and I have noticed our tools have been missing out of our locked lockers. These are expensive construction tools that are our livelihood. I hid a motion ...
3
votes
4answers
323 views

Should I provide my photo ID to a recruiter? [duplicate]

A third-party recruiter reached out to me for a job at a tech company. After receiving my resume, the recruiter said that the company (which he named) has requested my photo ID. The company seems to ...
33
votes
5answers
6k views

How should an employer respond to on-site theft?

I, and some others, have recently had some personal belongings (valuable electronics) stolen from personal offices at work. It's unlikely to be co-workers and much more likely to be on-site ...
10
votes
4answers
2k views

Internal Company Spam Guidelines [closed]

Background As a business we have a good spam filter which protects against 99% of externally originated spam emails and quarantines them. Recently however we have been receiving lots of spam from ...
-1
votes
2answers
196 views

Voluntary self identification of a disability form - should I discose my RA? [closed]

I have rheumatoid arthritis. Should I fill out the "voluntary self identification of a disability" form? I have worked for this company over 20 years. We do have a functional abilities test that ...
1
vote
3answers
247 views

Recruiter asking for last 3 digits of SSN, day and month of birth [duplicate]

The recruiter says they will need it to create my security ID as the role is through a vendor management system. Does this sound legit?
8
votes
5answers
936 views

Is it ethical to implement site-wide facial recognition technology without informing all employees?

Background I am a very junior researcher working at a government research institution that, alongside R&D, hosts lots of educational courses. Due to presence of potentially sensitive data, ...
1
vote
3answers
708 views

I'm a freelancer and my boss fired me without real reason. How can I secure my work? [closed]

Yesterday my boss fired me (I'm still in for one or two days) because of a pretty heated discussion that involved management steps and ideas. We are very far into the beta development stages. I ...
2
votes
1answer
344 views

Adding a home address to an LLC - real home address vs PO box vs private mailbox service

Can someone provide insight on the pros/cons of registering a business using (1) a real home address vs (2) a PO Box vs (3) a private mail service? The company is a small software consulting ...
1
vote
2answers
219 views

Addressing client's security and controllability concerns

After events described in this question, my team and I decided to start our own company (limited liability). So far we are still going through setup procedures, and we are currently working with ...
5
votes
1answer
578 views

What can I do when I've discovered that my client's app might violate COPPA and they're taking no action

My employer is a staffing company, and I'm on a 4-month contract with the client. The client gets funding from the National Science Foundation, Bill and Melinda Gates Foundation, and others. They ...
0
votes
2answers
171 views

How to communicate with checkbox-tickers about CMS choices [closed]

A web department develops a lot of CMSes using developer-friendly tools and frameworks, mostly using open-source technologies. They are being asked to develop and support a website using Sharepoint ...
2
votes
1answer
252 views

Client asks for SSN in Statement of Work and wants it sent signed via email

In a Statement of Work from a client, there's a field for the Social Security Number or the Tax Identification Number in the Contractor details. The client wants this SoW sent back signed, over email, ...
0
votes
2answers
275 views

Job offer was rescinded due to security clearance?

My husband received a conditional offer for a job that required security clearance. After they investigated him the report has "No Determination Status. Therefore the job offer was rescinded. We are ...
28
votes
9answers
8k views

How to get employees to set alarm when exiting the building?

My office has an alarm that should be set when they exit the building. Unfortunately, sometimes the last employee out forgets, or doesn't realize that they're the last one (the office is on a single ...
6
votes
2answers
772 views

Security clearance commitment as intern

I have an internship at a government contractor and just handed in my security clerance papers (TS/SCI). I heard they are expensive to sponsor, if I decide not to return to the company in the future ...
68
votes
12answers
8k views

As a developer, how can I ask for more freedom when confronted with a tight IT security policy?

I've just joined a new company of around 100 employees, 15 of which are developers (including myself). A very frustrating aspect of the job is the IT security policy. As developers we need access to ...
13
votes
3answers
3k views

Should I report to HR and involve others if I am being wrongly accused of theft?

Today something weird happened to me at work - I was accused of stealing a ring by my company's security personnel. Of course, I didn't do it; I even helped my colleague to try to find the ring. My ...
-2
votes
1answer
309 views

Work-environment: how to handle consequences of assumptions [closed]

I have been fortunate enough to work in Indonesia for a couple of years, immediately after graduating from college. I noticed some problems that always arise that are not easy to solve. One of the ...
21
votes
4answers
3k views

Is it reasonable to set up a hidden camera in one's office?

Someone I know --not me and not in my workplace-- has noticed a number of incidents of vandalism and petty theft in their office and in the offices of colleagues in nearby offices. Given that all ...
2
votes
3answers
729 views

How do I report the improper use of social security numbers at work?

At my workplace, my employer has a web based timeclock. At each location, we have a shared computer at the counter that employees use to clock in. The user ID that each person is assigned is their ...
1
vote
1answer
206 views

Can I ask a freelance agency to not send me my own personal info through email?

To be clear, I'm an independent contractor: people come to their website and ask for services, and I reply to the ones I can help with. If they decide to go with me, all payment goes through the ...
5
votes
4answers
679 views

Management is failing at enforcing their own security policies, what should I do?

At my current job, some of my duties are related to security. I know security and usability are inversely proportional, and because of that I have tried very hard to find the proper balance. I have ...
0
votes
1answer
950 views

Is it possible to work for an overseas contractor without a security clearance? [closed]

I always hear tales of Sysadmins doing overseas contractor work for 6 figures tax-free. I am willing to go overseas, even in a more dangerous country to do IT work. All of the resources I find are ...
72
votes
3answers
7k views

How to let clients know that they are being spied on [closed]

In the past I have found out that clients were being spied on. This happened twice; in both times I told them. And in both times I got burned for it. I have no regrets and I got a clear conscience. ...
7
votes
8answers
2k views

Why would personal computers not be allowed at the office?

What are the reasons for forbidding bringing a personal computer to the office (not for primary work use, but disallowed in any case)?
-1
votes
1answer
1k views

How much information should I give my former boss when I lost a company key? [closed]

I just ended my job and my last day was yesterday. I had lost my keys (I know, I'm bad) and informed the secretary who is encharge of them and she gave me a replacement set. The other day when I left ...
0
votes
4answers
409 views

Moving to new technologies when colleagues don't want to [closed]

I work with really old technology which takes ages to create websites. The security is also bad (tons of vulnerabilities such as XSS, CSRF...). How do I change to a better situation? The guy who ...
22
votes
11answers
3k views

Should the manager be CC'd when sending username and password to employee

I often create logins for new employees and then send them an email with their login credentials. While doing so I also CC their manager to let him know his user has been setup. Is this the right ...
11
votes
4answers
1k views

Revoking access privileges when someone leaves a job

I work in a start up company, with a very small team. This has been my first and only job since I graduated too. Recently, a person on design team left our company for greener pastures elsewhere and ...
6
votes
2answers
2k views

Employers installing keyloggers on work PC [closed]

I am in Canada. Is it legal for your employer to install a keylogger or other monitoring software on your workplace PC without informing you of this fact? Do I have any right regarding this?