Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Security is the degree of resistance to, or protection from, harm. Workplace questions should only be tagged with this if they relate to actual security concerns (physical or digital) and are specific to the workplace. See extended tag info for usage guidelines.

212
votes
9answers
25k views

Should a new employee be disciplined for not recognising a superior? [closed]

I work as a senior developer in a small/medium UK-based company with multiple offices. Rarely do personnel go between the different offices. Our office has a publicly accessible reception area but the ...
195
votes
17answers
47k views

Is it acceptable to do a security test on a company's open WiFi before an interview?

I was invited to an interview for an IT position in an organization called XYZ. While waiting in the lobby, I found an open WiFi network called XYZ. I connected to it and was greeted with a web page ...
141
votes
10answers
28k views

What to do when during a meeting client's people start to (physically) fight with each other?

I work on a project that requires many on-site meetings at the client's location, with client people from different departments. These departments can be considered as closed silos, where everyone ...
114
votes
13answers
23k views

Higher up doesn't carry around their security badge and asks others to let them in. What should I do about this security issue?

Every six months or so, we have to take an online security course that includes training on the security badges we carry around. Basically, our company assigns each employee a security badge, which is ...
112
votes
13answers
32k views

My coworker emailed me a root password that I'm not supposed to have. Should I tell my boss, and if so how do I tell without sounding petty? [closed]

I'm a junior-ish employee at a company (I'm not technically junior experience-wise, but I'm junior compared to the massive amounts of experience everyone else has and I've been here the shortest). ...
92
votes
9answers
18k views

Personal and legal liability with respect to inexperience?

I am a recent Bachelor's graduate in computer science - I have been employed in the field for less than a year. My current employer is asking me to design and implement a relatively advanced ...
90
votes
9answers
17k views

Should I report this workplace thievery?

For the last 6 months, some of my coworkers and I have noticed our tools have been missing out of our locked lockers. These are expensive construction tools that are our livelihood. I hid a motion ...
88
votes
3answers
11k views

How to let clients know that they are being spied on [closed]

In the past I have found out that clients were being spied on. This happened twice; in both times I told them. And in both times I got burned for it. I have no regrets and I got a clear conscience. ...
84
votes
7answers
12k views

Company doesn't follow security policies advertised to clients

I work for a small consulting company with no formal IT personnel. One other employee and I are the only ones who actually care about information security and network management. We both get a ton of ...
83
votes
10answers
16k views

Can my boss open and use my computer when I'm not present?

In my workplace, sometimes my boss reactivates my computer from hibernation and reset my password to get into my Windows account. I know that the computer belongs to the company, but I'm used to ...
81
votes
13answers
12k views

As a developer, how can I ask for more freedom when confronted with a tight IT security policy?

I've just joined a new company of around 100 employees, 15 of which are developers (including myself). A very frustrating aspect of the job is the IT security policy. As developers we need access to ...
81
votes
6answers
16k views

My CEO wants permanent access to every employee's emails. How do I explain that this is a terrible idea?

Our CEO wants our IT provider to configure his email client so he can see every employee's work emails in his inbox all the time. To make a long story short he's concerned about a specific employee ...
80
votes
10answers
6k views

Sexual Harassment, helpless and scared

Disclaimer: I am not even posting this anonymous, because I really don't care anymore, and I want to be able to answer every single comment, and thank every single answer. Background Information: ...
63
votes
8answers
21k views

Stuff has gone missing off my desk at work - what are my options?

A few months ago, I had a pair of earbuds I used to listen to music at work. I would also occasionally take them home with me to use, and after a few months they got lost at work. I'm sure I left them ...
60
votes
5answers
13k views

Request to meet with the CEO in a hotel before work [closed]

Toward the end of the work day today, I received a meeting invitation via Outlook from my direct manager. I was in a meeting when I received the invitation, and he had already gone home by the time I ...
58
votes
11answers
13k views

Motivate coworkers to use strong passwords

I work for an expanding company, and we are currently establishing a new IT-infrastructure and several company-policies (privacy/safety rules). One of my biggest concerns is the acceptance of ...
58
votes
6answers
21k views

Someone peeled an American flag sticker off of my truck. What do I do?

I started a new job recently and I noticed one day that my American flag sticker had been removed from my truck's window. I am heavily suspicious that it may have occurred while I was at work, and ...
55
votes
6answers
11k views

How do I prevent my manager from abusing a contract specification that breaches my privacy?

I'm employed as a software developer. In my country the employer is not allowed to monitor your activities due to privacy laws. However, due to the nature of some of our clients, our company is ...
44
votes
7answers
18k views

Quitting employee has privileged access to critical information

A colleague of mine had some very privileged access to sensitive information, that was kept in remote machines with no internet access whose files could not be copied to local machines. He quit the ...
43
votes
3answers
11k views

Is it normal for a company to ask for a photo ID when finishing my new-hire paperwork?

I've been hired by a company recently and now they're finishing my paperwork. Today, I was asked to provide a photo ID. I'm going to use a picture of my license. I want to make sure this is normal ...
36
votes
11answers
11k views

Is there any risk in sharing info about technologies and products we use with a supplier?

Sometimes I email with suppliers of different software products we use, may use in the future or have used in the past. In these conversations I of course provide the info necessary so that the ...
34
votes
5answers
37k views

How should an employer respond to on-site theft?

I, and some others, have recently had some personal belongings (valuable electronics) stolen from personal offices at work. It's unlikely to be co-workers and much more likely to be on-site ...
30
votes
11answers
6k views

Should the manager be CC'd when sending username and password to employee

I often create logins for new employees and then send them an email with their login credentials. While doing so I also CC their manager to let him know his user has been setup. Is this the right ...
30
votes
9answers
16k views

How to get employees to set alarm when exiting the building?

My office has an alarm that should be set when they exit the building. Unfortunately, sometimes the last employee out forgets, or doesn't realize that they're the last one (the office is on a single ...
30
votes
6answers
4k views

Coworker brings girlfriend to the office during afterhours

My coworker and I often work some (unpaid) hours on evenings and weekends. He recently started to bring in his girlfriend to the company. She will sit next to him without talking, doing stuff on her ...
28
votes
10answers
9k views

How should I approach asking to have a lock put on my storage cabinet under my desk?

I work at a small startup and we are growing quite rapidly. We recently moved to a new, bigger location and got new desks and storage cabinets for our things. I'm not secretive and I have nothing to ...
28
votes
6answers
8k views

Boss asking for account passwords she can reset before I resign

I'm leaving a company I've been with due to the boss reneging on various promises, bonuses, etc. After declining counter-offers and other incentives, the boss started become hostile towards me, and ...
24
votes
4answers
6k views

Is it reasonable to set up a hidden camera in one's office?

Someone I know --not me and not in my workplace-- has noticed a number of incidents of vandalism and petty theft in their office and in the offices of colleagues in nearby offices. Given that all ...
24
votes
4answers
9k views

Should I report to HR and involve others if I am being wrongly accused of theft?

Today something weird happened to me at work - I was accused of stealing a ring by my company's security personnel. Of course, I didn't do it; I even helped my colleague to try to find the ring. My ...
18
votes
6answers
3k views

Revoking access privileges when someone leaves a job [closed]

I work in a start up company, with a very small team. This has been my first and only job since I graduated too. Recently, a person on design team left our company for greener pastures elsewhere and ...
16
votes
4answers
9k views

Coworkers have large pocket knives, company doesn't have policy

I just started with a medium sized company in Ottawa, and I noticed a lot of engineers have one-handed pocket knives. ie: The kind you can push open with one thumb. I'm not comfortable working in an ...
16
votes
7answers
3k views

How to talk about the possibility of the admin being an insider threat without offending?

I work on the Information Security team and my job is to look at various applications used by a multinational finance company to analyze the design of the systems find potential security risks - ...
15
votes
4answers
2k views

What should I do after finding salary information on the company fileserver?

We have a local fileserver on premises. It appears a manager synced his cloud storage account to a folder on this server (in a location that's not very hard to find). This folder is now accessible to ...
12
votes
3answers
5k views

Employer fully locking me into the premises at night - how can I avoid that? [closed]

My company currently employs me on a rotating shift pattern; days, nights and afternoons. On the day and afternoon shift there is always a team leader or supervisor present with keys to the padlocked ...
11
votes
5answers
2k views

Management is failing at enforcing their own security policies, what should I do?

At my current job, some of my duties are related to security. I know security and usability are inversely proportional, and because of that I have tried very hard to find the proper balance. I have ...
10
votes
5answers
3k views

Should I disclose I know sensitive information about a company relation that I wasn't supposed to know?

The story goes like this: I am currently interning at one technology company. I am probably going to intern at a security consultancy company. By reading information about the security consultancy, ...
10
votes
4answers
2k views

Internal Company Spam Guidelines [closed]

Background As a business we have a good spam filter which protects against 99% of externally originated spam emails and quarantines them. Recently however we have been receiving lots of spam from ...
9
votes
2answers
967 views

Salary employee (software developer) held personally liable for client's data loss or exposure (GDPR)

I'm working as full time software developer at relatively small IT company (around 15 employees) which itself is a part of larger group of small to mid sized companies. In preparation for EU's new ...
9
votes
4answers
14k views

Should I give recruiter my DOB and last four digits of SSN?

This site has had similar questions about giving private information to recruiters but I haven't seen this particular case. When I'm cold-called by an recruitment agency about a job, and I agree to ...
9
votes
2answers
887 views

How to protect myself when asked to omit a finding in an internal audit report?

If your boss ask you to modify an audit report to omit material findings that are critical to the continuity of an organization, how can I protect myself?
8
votes
3answers
2k views

Restricted control over company's laptop [closed]

I have been recently hired as a security engineer on a company. They provided me a MacBook Pro as a company laptop. As I always do in any computer in my possession - including in previous jobs - I ...
8
votes
5answers
2k views

Is it ethical to implement site-wide facial recognition technology without informing all employees?

Background I am a very junior researcher working at a government research institution that, alongside R&D, hosts lots of educational courses. Due to presence of potentially sensitive data, ...
8
votes
3answers
739 views

Unable to persuade colleagues

An issue I've been running into a lot is that me and colleagues are discussing how to do a certain thing in the field of software development, e.g. security. The team leans towards a certain approach ...
8
votes
4answers
2k views

Handling fallout due to new security policies

I am an InfoSec professional working as an IT auditor. For several months now, I have working closely with our information security team to strengthen the security controls governing our PCI and SOX ...
8
votes
3answers
889 views

How long to wait before escalating security issue?

Last night I was familiarizing myself with the codebase of an application that I will begin supporting. In doing so, I found a vulnerability that needs to be resolved. This application is core to the ...
8
votes
1answer
787 views

What can I do when I've discovered that my client's app might violate COPPA and they're taking no action

My employer is a staffing company, and I'm on a 4-month contract with the client. The client gets funding from the National Science Foundation, Bill and Melinda Gates Foundation, and others. They ...
7
votes
8answers
7k views

Why would personal computers not be allowed at the office?

What are the reasons for forbidding bringing a personal computer to the office (not for primary work use, but disallowed in any case)?
7
votes
7answers
2k views

How to persuade boss that games with e-mail are not a good way to increase security

My boss wants to force a game that when you leave your computer unlocked and walk away others will send an e-mail from you (saying something stupid; like free doughnuts tomorrow). The impetus for ...
7
votes
4answers
849 views

Product Manager Doesn’t Care About Cybersecurity

Recently it was discovered that one of the open source packages we were using in our software was deemed vulnerable many years ago. It is no longer maintained. It is also too costly to remove and ...
7
votes
2answers
3k views

Employers installing keyloggers on work PC [closed]

I am in Canada. Is it legal for your employer to install a keylogger or other monitoring software on your workplace PC without informing you of this fact? Do I have any right regarding this?