Questions tagged [security]

Security is the degree of resistance to, or protection from, harm. Workplace questions should only be tagged with this if they relate to actual security concerns (physical or digital) and are specific to the workplace. See extended tag info for usage guidelines.

Filter by
Sorted by
Tagged with
210
votes
9answers
25k views

Should a new employee be disciplined for not recognising a superior? [closed]

I work as a senior developer in a small/medium UK-based company with multiple offices. Rarely do personnel go between the different offices. Our office has a publicly accessible reception area but the ...
195
votes
17answers
47k views

Is it acceptable to do a security test on a company's open WiFi before an interview?

I was invited to an interview for an IT position in an organization called XYZ. While waiting in the lobby, I found an open WiFi network called XYZ. I connected to it and was greeted with a web page ...
143
votes
10answers
29k views

What to do when during a meeting client's people start to (physically) fight with each other?

I work on a project that requires many on-site meetings at the client's location, with client people from different departments. These departments can be considered as closed silos, where everyone ...
115
votes
12answers
21k views

Should I report a leak of confidential HR information?

I found that an employee who is no longer with us uploaded a giant Excel file containing HR information into Slack. The file is available to anyone in our Slack and contains names of all current and ...
114
votes
13answers
24k views

Higher up doesn't carry around their security badge and asks others to let them in. What should I do about this security issue?

Every six months or so, we have to take an online security course that includes training on the security badges we carry around. Basically, our company assigns each employee a security badge, which is ...
111
votes
13answers
32k views

My coworker emailed me a root password that I'm not supposed to have. Should I tell my boss, and if so how do I tell without sounding petty? [closed]

I'm a junior-ish employee at a company (I'm not technically junior experience-wise, but I'm junior compared to the massive amounts of experience everyone else has and I've been here the shortest). ...
93
votes
9answers
17k views

Should I report this workplace thievery?

For the last 6 months, some of my coworkers and I have noticed our tools have been missing out of our locked lockers. These are expensive construction tools that are our livelihood. I hid a motion ...
92
votes
9answers
18k views

Personal and legal liability with respect to inexperience?

I am a recent Bachelor's graduate in computer science - I have been employed in the field for less than a year. My current employer is asking me to design and implement a relatively advanced ...
89
votes
3answers
11k views

How to let clients know that they are being spied on [closed]

In the past I have found out that clients were being spied on. This happened twice; in both times I told them. And in both times I got burned for it. I have no regrets and I got a clear conscience. ...
83
votes
10answers
17k views

Can my boss open and use my computer when I'm not present?

In my workplace, sometimes my boss reactivates my computer from hibernation and reset my password to get into my Windows account. I know that the computer belongs to the company, but I'm used to ...
83
votes
10answers
7k views

Sexual Harassment, helpless and scared

Disclaimer: I am not even posting this anonymous, because I really don't care anymore, and I want to be able to answer every single comment, and thank every single answer. Background Information: ...
83
votes
7answers
12k views

Company doesn't follow security policies advertised to clients

I work for a small consulting company with no formal IT personnel. One other employee and I are the only ones who actually care about information security and network management. We both get a ton of ...
81
votes
13answers
12k views

As a developer, how can I ask for more freedom when confronted with a tight IT security policy?

I've just joined a new company of around 100 employees, 15 of which are developers (including myself). A very frustrating aspect of the job is the IT security policy. As developers we need access to ...
81
votes
6answers
17k views

My CEO wants permanent access to every employee's emails. How do I explain that this is a terrible idea?

Our CEO wants our IT provider to configure his email client so he can see every employee's work emails in his inbox all the time. To make a long story short he's concerned about a specific employee ...
63
votes
8answers
22k views

Stuff has gone missing off my desk at work - what are my options?

A few months ago, I had a pair of earbuds I used to listen to music at work. I would also occasionally take them home with me to use, and after a few months they got lost at work. I'm sure I left them ...
59
votes
5answers
13k views

Request to meet with the CEO in a hotel before work [closed]

Toward the end of the work day today, I received a meeting invitation via Outlook from my direct manager. I was in a meeting when I received the invitation, and he had already gone home by the time I ...
58
votes
11answers
13k views

Motivate coworkers to use strong passwords

I work for an expanding company, and we are currently establishing a new IT-infrastructure and several company-policies (privacy/safety rules). One of my biggest concerns is the acceptance of ...
58
votes
6answers
21k views

Someone peeled an American flag sticker off of my truck. What do I do?

I started a new job recently and I noticed one day that my American flag sticker had been removed from my truck's window. I am heavily suspicious that it may have occurred while I was at work, and ...
55
votes
6answers
11k views

How do I prevent my manager from abusing a contract specification that breaches my privacy?

I'm employed as a software developer. In my country the employer is not allowed to monitor your activities due to privacy laws. However, due to the nature of some of our clients, our company is ...
48
votes
7answers
19k views

Quitting employee has privileged access to critical information

A colleague of mine had some very privileged access to sensitive information, that was kept in remote machines with no internet access whose files could not be copied to local machines. He quit the ...
43
votes
3answers
12k views

Is it normal for a company to ask for a photo ID when finishing my new-hire paperwork?

I've been hired by a company recently and now they're finishing my paperwork. Today, I was asked to provide a photo ID. I'm going to use a picture of my license. I want to make sure this is normal ...
36
votes
11answers
11k views

Is there any risk in sharing info about technologies and products we use with a supplier?

Sometimes I email with suppliers of different software products we use, may use in the future or have used in the past. In these conversations I of course provide the info necessary so that the ...
34
votes
5answers
41k views

How should an employer respond to on-site theft?

I, and some others, have recently had some personal belongings (valuable electronics) stolen from personal offices at work. It's unlikely to be co-workers and much more likely to be on-site ...
33
votes
10answers
20k views

Job interview by video at home and privacy concerns

I wrote a job application and the next step would be a video interview. Is it safe to do it at my home or should I go for example to a library or other public place to conduct the interview? I mean, ...
30
votes
11answers
6k views

Should the manager be CC'd when sending username and password to employee

I often create logins for new employees and then send them an email with their login credentials. While doing so I also CC their manager to let him know his user has been setup. Is this the right ...
30
votes
9answers
17k views

How to get employees to set alarm when exiting the building?

My office has an alarm that should be set when they exit the building. Unfortunately, sometimes the last employee out forgets, or doesn't realize that they're the last one (the office is on a single ...
29
votes
6answers
4k views

Coworker brings girlfriend to the office during afterhours

My coworker and I often work some (unpaid) hours on evenings and weekends. He recently started to bring in his girlfriend to the company. She will sit next to him without talking, doing stuff on her ...
28
votes
10answers
9k views

How should I approach asking to have a lock put on my storage cabinet under my desk?

I work at a small startup and we are growing quite rapidly. We recently moved to a new, bigger location and got new desks and storage cabinets for our things. I'm not secretive and I have nothing to ...
28
votes
6answers
9k views

Boss asking for account passwords she can reset before I resign

I'm leaving a company I've been with due to the boss reneging on various promises, bonuses, etc. After declining counter-offers and other incentives, the boss started become hostile towards me, and ...
25
votes
4answers
9k views

Should I report to HR and involve others if I am being wrongly accused of theft?

Today something weird happened to me at work - I was accused of stealing a ring by my company's security personnel. Of course, I didn't do it; I even helped my colleague to try to find the ring. My ...
24
votes
4answers
6k views

Is it reasonable to set up a hidden camera in one's office?

Someone I know --not me and not in my workplace-- has noticed a number of incidents of vandalism and petty theft in their office and in the offices of colleagues in nearby offices. Given that all ...
18
votes
6answers
3k views

Revoking access privileges when someone leaves a job [closed]

I work in a start up company, with a very small team. This has been my first and only job since I graduated too. Recently, a person on design team left our company for greener pastures elsewhere and ...
16
votes
4answers
9k views

Coworkers have large pocket knives, company doesn't have policy

I just started with a medium sized company in Ottawa, and I noticed a lot of engineers have one-handed pocket knives. ie: The kind you can push open with one thumb. I'm not comfortable working in an ...
16
votes
7answers
3k views

How to talk about the possibility of the admin being an insider threat without offending?

I work on the Information Security team and my job is to look at various applications used by a multinational finance company to analyze the design of the systems find potential security risks - ...
15
votes
4answers
2k views

What should I do after finding salary information on the company fileserver?

We have a local fileserver on premises. It appears a manager synced his cloud storage account to a folder on this server (in a location that's not very hard to find). This folder is now accessible to ...
12
votes
3answers
5k views

Employer fully locking me into the premises at night - how can I avoid that? [closed]

My company currently employs me on a rotating shift pattern; days, nights and afternoons. On the day and afternoon shift there is always a team leader or supervisor present with keys to the padlocked ...
11
votes
5answers
2k views

Management is failing at enforcing their own security policies, what should I do?

At my current job, some of my duties are related to security. I know security and usability are inversely proportional, and because of that I have tried very hard to find the proper balance. I have ...
10
votes
5answers
3k views

Should I disclose I know sensitive information about a company relation that I wasn't supposed to know?

The story goes like this: I am currently interning at one technology company. I am probably going to intern at a security consultancy company. By reading information about the security consultancy, ...
10
votes
4answers
2k views

Internal Company Spam Guidelines [closed]

Background As a business we have a good spam filter which protects against 99% of externally originated spam emails and quarantines them. Recently however we have been receiving lots of spam from ...
10
votes
4answers
1k views

How do I report an employee who is compromising security of employees and clients?

I work as a software developer on a team of 4 people for a community outreach organization. The network security is poor but upper management is aware of it, and we're planning to switch to a better ...
9
votes
2answers
1k views

Salary employee (software developer) held personally liable for client's data loss or exposure (GDPR)

I'm working as full time software developer at relatively small IT company (around 15 employees) which itself is a part of larger group of small to mid sized companies. In preparation for EU's new ...
9
votes
4answers
16k views

Should I give recruiter my DOB and last four digits of SSN?

This site has had similar questions about giving private information to recruiters but I haven't seen this particular case. When I'm cold-called by an recruitment agency about a job, and I agree to ...
9
votes
2answers
894 views

How to protect myself when asked to omit a finding in an internal audit report?

If your boss ask you to modify an audit report to omit material findings that are critical to the continuity of an organization, how can I protect myself?
8
votes
3answers
3k views

Restricted control over company's laptop [closed]

I have been recently hired as a security engineer on a company. They provided me a MacBook Pro as a company laptop. As I always do in any computer in my possession - including in previous jobs - I ...
8
votes
5answers
2k views

Is it ethical to implement site-wide facial recognition technology without informing all employees?

Background I am a very junior researcher working at a government research institution that, alongside R&D, hosts lots of educational courses. Due to presence of potentially sensitive data, ...
8
votes
3answers
751 views

Unable to persuade colleagues

An issue I've been running into a lot is that me and colleagues are discussing how to do a certain thing in the field of software development, e.g. security. The team leans towards a certain approach ...
8
votes
4answers
2k views

Handling fallout due to new security policies

I am an InfoSec professional working as an IT auditor. For several months now, I have working closely with our information security team to strengthen the security controls governing our PCI and SOX ...
8
votes
3answers
908 views

How long to wait before escalating security issue?

Last night I was familiarizing myself with the codebase of an application that I will begin supporting. In doing so, I found a vulnerability that needs to be resolved. This application is core to the ...
8
votes
4answers
1k views

Company failed to take data breach seriously

A few months back, I was working with someone in Payroll to resolve some paycheck errors that occurred when my employer switched to a new payroll system. As it turns out, hundreds of employees were ...
8
votes
1answer
797 views

What can I do when I've discovered that my client's app might violate COPPA and they're taking no action

My employer is a staffing company, and I'm on a 4-month contract with the client. The client gets funding from the National Science Foundation, Bill and Melinda Gates Foundation, and others. They ...