2

What would you suggest if one works in a company but finds something wrong on some part of the company he or she is not working on? Let's say for example that a secretary or even his or her friend finds a misprint or SQL-injection on company's website. Is it help or hinder if he or she concentrates on wrong subjects?

12

If you find a mistake regardless of who's mistake it is and there is potential to impact company operations or systems (IT, financial etc), then you should report it. The last thing you want is to see something and do nothing about it; especially if it can generate blow back later on. Reporting it is a matter of supporting the company and the best interest of all stakeholders. Report the matter to the appropriate chain of command and let them decide how to best respond.

  • You need to be VERY CARFUL here. Talk to the wrong person, and things can go wrong. You need to figure out who to actually tell; somebody who will action it properly and not kick up a fuss, create an internal security panic, or accuse you of "hacking". Sometimes, what would usually be the appropriate chain of command isn't appropriate for security holes because people react badly when they hear of a serious issue that isn't part of their normal job to deal with. – gburton Nov 26 '16 at 4:19
4

You can't put all mistakes in the same bucket. A "your" when it should be "you're" does not warrent reporting unless it is in a contract. A SQL injection vulnerability on an outward facing server then yes report it. If in doubt ask you're boss.

  • You don't think a grammatical error on the company website is worth pointing out? – Carson63000 Jul 10 '15 at 22:11
  • @Carson63000 The question is should (not worth). If you want to report it fine but if I have work to do I am going to do my work. – paparazzo Jul 10 '15 at 22:17
  • 2
    Interesting. Not an attitude I'd ever want to see in any of my reports, but to each their own. – Carson63000 Jul 10 '15 at 22:49
  • 3
    Ask you're boss - I see what you did there. Well played. :) – Kent A. Jul 10 '15 at 23:07
  • 3
    If you can't finish your assigned tasks because it takes you a significant amount of time to fire off an email about a typo on the website, that's a whole separate problem. But yes, I'd rather someone who cares about the business than someone who just wants to sit in a box and work on "his" work. – Carson63000 Jul 11 '15 at 2:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.