Questions tagged [security]

Security is the degree of resistance to, or protection from, harm. Workplace questions should only be tagged with this if they relate to actual security concerns (physical or digital) and are specific to the workplace. See extended tag info for usage guidelines.

Filter by
Sorted by
Tagged with
0
votes
1answer
191 views

How to request colleague assistance for on call support during manager vacation?

I recently joined the information security team at my employer about a month ago. Just this week, I started to participate in off hours on-call support as security must be available on a continuous ...
4
votes
4answers
554 views

How to assist non - technical end users communicate effectively and concisely during incident response?

As a member of the Information Security team at my workplace, triaging, researching, and escalating if necessary of SIEM / IDS alerts is one of my job duties. I work at central company headquarters ...
4
votes
6answers
722 views

How to gain trust of colleague who is blocking access to data?

I work in the research department of a small company. There are two people with access to the research database, me and my colleague. The research database contains anonymized data. My colleague is ...
-6
votes
1answer
204 views

The kind of safe a large company uses for important documents [closed]

Wondering what a larger company with resources uses to store important potentially confidential documents. Or what is recommended as best practices if most companies don't typically adhere to them. ...
7
votes
4answers
1k views

Product Manager Doesn’t Care About Cybersecurity

Recently it was discovered that one of the open source packages we were using in our software was deemed vulnerable many years ago. It is no longer maintained. It is also too costly to remove and ...
5
votes
5answers
5k views

Is it safe to check personal accounts in work computer?

So sometimes I check things like my personal emails and do financial transactions like pay bills on my work computer. I came across an article recently that it said your work monitors every little ...
1
vote
3answers
201 views

Value of intermediate status to certification in cybersecurity profession - Associate ISC^2

In the past year, I successfully passed the CISSP exam administered by ISC^2 . The CISSP certification is highly reputable and the most widely recognized certification amongst IT Security ...
-2
votes
2answers
565 views

How a cloud data center company hires security guards [closed]

In reading a little about cloud security on platforms such as Amazon Web Services (AWS) or Google Cloud, I realize they have to hire security guards in addition to having the software-level and ...
-7
votes
3answers
459 views

How to respond to third party (vendor) theft and fraud? [closed]

Our organization acquired a software from a software engineer (Alice). Alice designed the software to take 2% off the top of all transactions and place it into her bank account. If we complained to ...
-6
votes
1answer
225 views

Are incorrect login attempts logged in by the website or company [closed]

When you put in an incorrect user id and/or password , do companies/websites keep a record of that? Like for example Joe1 had an incorrect login attempt at this time? And if so how long do they keep ...
0
votes
1answer
197 views

Sharing promotion letter from an old employer

I am currently searching for a job. Can I include the promotion letter from my old employer in my portfolio? It includes words of appreciation, new designation, and allowance.
1
vote
1answer
368 views

Personal e-mail obtained due to compromised work account (GDPR) [closed]

At my current place of work a phishing e-mail was sent from an employee's e-mail address (Let's call them Sally). An e-mail originating from Sally's account was sent to everyone's work e-mail within ...
0
votes
2answers
251 views

How to convince manager of need for additional security testing before release [closed]

I work in the InfoSec profession as an IT auditor. One of my duties at work is testing and verifying that necessary security requirements are in place before code and application updates are released ...
1
vote
3answers
1k views

My company sends honeypot phishing email; should I automatically junk them?

My company sends honeypot phishing emails from within our organization in Microsoft Outlook. e.g. hr@mycompanyname.com , ithelpdesk@mycompanyname.com , etc. I fell to one of these in a lapse of ...
4
votes
3answers
387 views

Startup is going without clear direction [closed]

I currently work at an international startup in Asia that has been around for more than 5 years, and I am currently going on 2 years working there. The problem is lately, many of the startup's plans ...
6
votes
3answers
695 views

Is it common for software development jobs to prioritise speed over security (or lack thereof)? [closed]

I have encountered startups to large corporations (outsourcing work) to prioritise speed, go-to-market and churning out as much code as fast as possible. In this scenario, any software developer can ...
1
vote
0answers
90 views

Should I give my SSN to recruiter? [duplicate]

I got call from recruiter and he said I should give him my SSN in order to apply to job. From his email: As part of our disclosures and to present you as a qualified Candidate to [Company Name], ...
58
votes
11answers
13k views

Motivate coworkers to use strong passwords

I work for an expanding company, and we are currently establishing a new IT-infrastructure and several company-policies (privacy/safety rules). One of my biggest concerns is the acceptance of ...
195
votes
17answers
48k views

Is it acceptable to do a security test on a company's open WiFi before an interview?

I was invited to an interview for an IT position in an organization called XYZ. While waiting in the lobby, I found an open WiFi network called XYZ. I connected to it and was greeted with a web page ...
0
votes
2answers
448 views

Separating work and personal accounts

How to separate personal and professional accounts? Everyone knows it's a good practice to separate personal and professional emails, but when talking about online accounts things get murkier. I ...
93
votes
9answers
18k views

Personal and legal liability with respect to inexperience?

I am a recent Bachelor's graduate in computer science - I have been employed in the field for less than a year. My current employer is asking me to design and implement a relatively advanced ...
15
votes
4answers
2k views

What should I do after finding salary information on the company fileserver?

We have a local fileserver on premises. It appears a manager synced his cloud storage account to a folder on this server (in a location that's not very hard to find). This folder is now accessible to ...
1
vote
4answers
1k views

Is it an acceptable practice for IT to ask an employee for their password over Skype Messenger?

I got an email saying my password would expire in a few days, so I clicked on the link in the email and updated it. After doing so, I realized I could no longer log in to my computer, except by ...
0
votes
3answers
507 views

How to get the attention of operations manager as a junior?

The software development company I work for has around 40-50 employees with about 12 of those being developers. I work as a junior developer and have been working for about a year after completing an ...
4
votes
2answers
968 views

How to deal with senior employees subverting security tests [closed]

I work as an IT contractor for a large insurance company in the UK. Every so often, our security team will send a fake email around our office, to test that people can recognize and flag phishing/...
0
votes
1answer
167 views

Communicating with prospective vendor about official documents

My manager and senior management at my company has requested due diligence feedback on a prospective vendor our company is thinking of doing business with. It is the same company I asked about in this ...
0
votes
1answer
163 views

Is it ok if I ask the employer for the contract iI have not signed yet

I have been given a job offer for a job in another country (Chiang Mai, Thailand), it is the first time I work abroad so I am not sure what to do to secure myself, should I ask for a signed contract ...
82
votes
7answers
12k views

Company doesn't follow security policies advertised to clients

I work for a small consulting company with no formal IT personnel. One other employee and I are the only ones who actually care about information security and network management. We both get a ton of ...
3
votes
3answers
470 views

Should I open the door if I cannot verify that someone has an access card? [closed]

I work at a popular hospital, and we use keycards/badges to enter buildings. If someone asks me to open the door for them should I oblige?
5
votes
3answers
1k views

How can I help team members be more discreet and judicious?

I am an IT Auditor and the lead for the team. Our team has access to very sensitive data such as: Audit findings Pen testing results / vulnerability scans Audit committee correspondence If some of ...
0
votes
5answers
3k views

Is it acceptable to leave laptop in locked car? [closed]

I was issued a high-end Mac laptop to perform my work. I was told that I should take the laptop to and from the office with me. Often on my way home form the office I stop by the grocery store or ...
8
votes
7answers
2k views

How to persuade boss that games with e-mail are not a good way to increase security

My boss wants to force a game that when you leave your computer unlocked and walk away others will send an e-mail from you (saying something stupid; like free doughnuts tomorrow). The impetus for this ...
13
votes
6answers
3k views

Handling fallout due to new security policies

I am an InfoSec professional working as an IT auditor. For several months now, I have working closely with our information security team to strengthen the security controls governing our PCI and SOX ...
6
votes
2answers
435 views

Raising concerns with a software vendor company

I was filling up some details in our payroll site that is maintained by a third party vendor. I had difficulty saving and there wasn't an error message. Curious, I decided to check the browser console ...
210
votes
9answers
26k views

Should a new employee be disciplined for not recognising a superior? [closed]

I work as a senior developer in a small/medium UK-based company with multiple offices. Rarely do personnel go between the different offices. Our office has a publicly accessible reception area but the ...
-1
votes
3answers
783 views

Would a big security breach destroy a programmer's career? [closed]

I am a programmer. I heard about Ccleaner security breach, I think Ccleaner is dead by now, who would trust such apps, one security breach destroyed a well known company. I guess the manager would be ...
2
votes
1answer
924 views

Cleaning Lady Snooping Around

Our company contracts cleaning services to a third party cleaning service. Last night I walked into my CEO's offices and caught our cleaning person sitting behind his desk on his chair texting and ...
-3
votes
2answers
236 views

Dealing with a development VM with no internet connection [closed]

I recently just started working at a company that is going to change the way their employees develop code. They are switching from one machine (VM) that does everything, meaning communicate to other ...
2
votes
6answers
1k views

Acceptable for new hire to bring up bad security practices, or “go with the flow”? [duplicate]

I'm a new hire low-level engineer at a large company in the US. When signing up for my benefits/insurance package, I noticed that the password requirements included a 9 character maximum. Needless to ...
59
votes
5answers
13k views

Request to meet with the CEO in a hotel before work [closed]

Toward the end of the work day today, I received a meeting invitation via Outlook from my direct manager. I was in a meeting when I received the invitation, and he had already gone home by the time I ...
8
votes
3answers
3k views

Restricted control over company's laptop [closed]

I have been recently hired as a security engineer on a company. They provided me a MacBook Pro as a company laptop. As I always do in any computer in my possession - including in previous jobs - I ...
16
votes
7answers
3k views

How to talk about the possibility of the admin being an insider threat without offending?

I work on the Information Security team and my job is to look at various applications used by a multinational finance company to analyze the design of the systems find potential security risks - ...
3
votes
3answers
2k views

Employer responsibility in a potentially (key) violent stalking situation?

Straight to the Point: What level of responsibility does an employer in the U.S. (New York State) have if an employee (full-time) alerts them to someone potentially stalking them and who might act out ...
111
votes
13answers
33k views

My coworker emailed me a root password that I'm not supposed to have. Should I tell my boss, and if so how do I tell without sounding petty? [closed]

I'm a junior-ish employee at a company (I'm not technically junior experience-wise, but I'm junior compared to the massive amounts of experience everyone else has and I've been here the shortest). ...
1
vote
2answers
530 views

Should I speak to my boss about Security Measures when my Internship is ending?

I'm currently in a 9 month internship in a small/medium sized company. On my first day in this job, I've been assigned to solo develop an application. I did, and the application is currently working ...
2
votes
3answers
780 views

Should I contact someone about IT asking for passwords? [closed]

I recently switched to a new laptop at work, so IT had to set it up for me and move my files over. The problem is they asked for my password to do it. I balked, and after some hemming and hawing on ...
6
votes
4answers
2k views

Found out co-worker got IT to get into my computer [closed]

At my current place of work, more than 1 person can use the same account on a single computer. The co-worker had initially asked why do I shut down my computer at the end of the day. To solve this ...
12
votes
6answers
24k views

Should I give recruiter my DOB and last four digits of SSN?

This site has had similar questions about giving private information to recruiters but I haven't seen this particular case. When I'm cold-called by an recruitment agency about a job, and I agree to ...
28
votes
6answers
11k views

Boss asking for account passwords she can reset before I resign

I'm leaving a company I've been with due to the boss reneging on various promises, bonuses, etc. After declining counter-offers and other incentives, the boss started become hostile towards me, and ...
2
votes
2answers
816 views

Communicating with a manager who has no programming experience

I am a Jr. Developer working in the healthcare industry. I am currently assigned to build automation tools that download eligibility files. I'll spare you most of the details since they are irrelevant ...