Questions tagged [security]

Security is the degree of resistance to, or protection from, harm. Workplace questions should only be tagged with this if they relate to actual security concerns (physical or digital) and are specific to the workplace. See extended tag info for usage guidelines.

Filter by
Sorted by
Tagged with
9
votes
2answers
981 views

How to protect myself when asked to omit a finding in an internal audit report?

If your boss ask you to modify an audit report to omit material findings that are critical to the continuity of an organization, how can I protect myself?
5
votes
4answers
2k views

I have noticed that a potential employer's website has been compromised - should I mention it during an interview?

I am about to have a telephone interview for a junior software developer position. When learning more about the company I have noticed that their website has been compromised or, simply put, hacked (...
-1
votes
1answer
286 views

Client's convoluted security measures are creating bigger risks, how to rebuild but preserve the original intent? [closed]

Accessing this client's system is a convoluted process, and parts of their infrastructure are unreliable. The original intent of this setup was that there would be layers of access to prevent people ...
115
votes
13answers
24k views

Higher up doesn't carry around their security badge and asks others to let them in. What should I do about this security issue?

Every six months or so, we have to take an online security course that includes training on the security badges we carry around. Basically, our company assigns each employee a security badge, which is ...
59
votes
6answers
21k views

Someone peeled an American flag sticker off of my truck. What do I do?

I started a new job recently and I noticed one day that my American flag sticker had been removed from my truck's window. I am heavily suspicious that it may have occurred while I was at work, and ...
12
votes
3answers
6k views

Employer fully locking me into the premises at night - how can I avoid that? [closed]

My company currently employs me on a rotating shift pattern; days, nights and afternoons. On the day and afternoon shift there is always a team leader or supervisor present with keys to the padlocked ...
82
votes
6answers
17k views

My CEO wants permanent access to every employee's emails. How do I explain that this is a terrible idea?

Our CEO wants our IT provider to configure his email client so he can see every employee's work emails in his inbox all the time. To make a long story short he's concerned about a specific employee ...
83
votes
10answers
19k views

Can my boss open and use my computer when I'm not present?

In my workplace, sometimes my boss reactivates my computer from hibernation and reset my password to get into my Windows account. I know that the computer belongs to the company, but I'm used to ...
8
votes
3answers
927 views

How long to wait before escalating security issue?

Last night I was familiarizing myself with the codebase of an application that I will begin supporting. In doing so, I found a vulnerability that needs to be resolved. This application is core to the ...
-3
votes
5answers
3k views

How to use personal accounts like Github on work computers? [closed]

I'm a software engineer and I use Github for all of my personal/open-source and work related stuff. In my new job, the IT department insists on giving us laptops without full admin access and I ...
63
votes
8answers
24k views

Stuff has gone missing off my desk at work - what are my options?

A few months ago, I had a pair of earbuds I used to listen to music at work. I would also occasionally take them home with me to use, and after a few months they got lost at work. I'm sure I left them ...
5
votes
4answers
782 views

How can I explain technical concepts related to business management who lack background to understand?

I am an IT auditor. I am writing a report for a security review / audit that I completed of a business application used by my company. I have found weaknesses related to MITM (Man in the middle) and ...
10
votes
5answers
3k views

Should I disclose I know sensitive information about a company relation that I wasn't supposed to know?

The story goes like this: I am currently interning at one technology company. I am probably going to intern at a security consultancy company. By reading information about the security consultancy, ...
-3
votes
2answers
6k views

How do I wear my badge (work tag) on my trousers? [closed]

I wear my badge (work tag with embedded RFID identification chip) around my neck, but I see some people have it mounted to the upper part of the trouser. I would like to do that, but I don't know how. ...
4
votes
2answers
925 views

Should companies pay employees for responsible disclosures?

I recently discovered a major security vulnerability (SQL injection) in one of my companies projects in my free time. I'm working there as a developer, not as a security researcher, but after ...
-1
votes
3answers
192 views

How to better track identities within company? [closed]

One of my responsibilities at work is to perform periodic user access reviews. A frustrating problem has been inconsistent to poor documentation,such as it becomes difficult to map users to roles. ...
55
votes
6answers
11k views

How do I prevent my manager from abusing a contract specification that breaches my privacy?

I'm employed as a software developer. In my country the employer is not allowed to monitor your activities due to privacy laws. However, due to the nature of some of our clients, our company is ...
-1
votes
2answers
20k views

Lost my company ID card on first week of work. How to report this to my supervisor? [closed]

Update Luckily, a colleague found my card and handed it back to our secretary. Seems that I forgot it in a meeting room. Thanks everybody for the suggestions anyway. I started to work in a new ...
1
vote
2answers
972 views

My manager wants to create an administrator account on my work computer that only he has the password to [closed]

This is on a Windows 10 system, that is provided to me by work. They want to create an administrator account that only my manager will have the password to. The thing is, this isn't from IT and it's ...
2
votes
3answers
2k views

Does my employer have the right to phishing a personal account for security purposes? [closed]

A few days ago I received a LinkedIn invitation email from some other employee of the company. I clicked the email link to check this person LinkedIn profile, I logged in with my personal account into ...
93
votes
9answers
17k views

Should I report this workplace thievery?

For the last 6 months, some of my coworkers and I have noticed our tools have been missing out of our locked lockers. These are expensive construction tools that are our livelihood. I hid a motion ...
3
votes
4answers
8k views

Should I provide my photo ID to a recruiter? [duplicate]

A third-party recruiter reached out to me for a job at a tech company. After receiving my resume, the recruiter said that the company (which he named) has requested my photo ID. The company seems to ...
35
votes
5answers
49k views

How should an employer respond to on-site theft?

I, and some others, have recently had some personal belongings (valuable electronics) stolen from personal offices at work. It's unlikely to be co-workers and much more likely to be on-site ...
10
votes
4answers
2k views

Internal Company Spam Guidelines [closed]

Background As a business we have a good spam filter which protects against 99% of externally originated spam emails and quarantines them. Recently however we have been receiving lots of spam from ...
0
votes
2answers
1k views

Voluntary self identification of a disability form - should I discose my RA? [closed]

I have rheumatoid arthritis. Should I fill out the "voluntary self identification of a disability" form? I have worked for this company over 20 years. We do have a functional abilities test that ...
2
votes
3answers
4k views

Recruiter asking for last 3 digits of SSN, day and month of birth [duplicate]

The recruiter says they will need it to create my security ID as the role is through a vendor management system. Does this sound legit?
9
votes
5answers
2k views

Is it ethical to implement site-wide facial recognition technology without informing all employees?

Background I am a very junior researcher working at a government research institution that, alongside R&D, hosts lots of educational courses. Due to presence of potentially sensitive data, ...
1
vote
3answers
2k views

I'm a freelancer and my boss fired me without real reason. How can I secure my work? [closed]

Yesterday my boss fired me (I'm still in for one or two days) because of a pretty heated discussion that involved management steps and ideas. We are very far into the beta development stages. I ...
2
votes
1answer
925 views

Adding a home address to an LLC - real home address vs PO box vs private mailbox service

Can someone provide insight on the pros/cons of registering a business using (1) a real home address vs (2) a PO Box vs (3) a private mail service? The company is a small software consulting business/...
1
vote
3answers
857 views

Addressing client's security and controllability concerns

After events described in this question, my team and I decided to start our own company (limited liability). So far we are still going through setup procedures, and we are currently working with ...
8
votes
1answer
810 views

What can I do when I've discovered that my client's app might violate COPPA and they're taking no action

My employer is a staffing company, and I'm on a 4-month contract with the client. The client gets funding from the National Science Foundation, Bill and Melinda Gates Foundation, and others. They ...
16
votes
4answers
10k views

Coworkers have large pocket knives, company doesn't have policy

I just started with a medium sized company in Ottawa, and I noticed a lot of engineers have one-handed pocket knives. ie: The kind you can push open with one thumb. I'm not comfortable working in an ...
0
votes
2answers
195 views

How to communicate with checkbox-tickers about CMS choices [closed]

A web department develops a lot of CMSes using developer-friendly tools and frameworks, mostly using open-source technologies. They are being asked to develop and support a website using Sharepoint ...
2
votes
1answer
358 views

Client asks for SSN in Statement of Work and wants it sent signed via email

In a Statement of Work from a client, there's a field for the Social Security Number or the Tax Identification Number in the Contractor details. The client wants this SoW sent back signed, over email, ...
0
votes
2answers
636 views

Job offer was rescinded due to security clearance?

My husband received a conditional offer for a job that required security clearance. After they investigated him the report has "No Determination Status. Therefore the job offer was rescinded. We are ...
30
votes
9answers
19k views

How to get employees to set alarm when exiting the building?

My office has an alarm that should be set when they exit the building. Unfortunately, sometimes the last employee out forgets, or doesn't realize that they're the last one (the office is on a single ...
6
votes
2answers
3k views

Security clearance commitment as intern

I have an internship at a government contractor and just handed in my security clerance papers (TS/SCI). I heard they are expensive to sponsor, if I decide not to return to the company in the future ...
86
votes
13answers
14k views

As a developer, how can I ask for more freedom when confronted with a tight IT security policy?

I've just joined a new company of around 100 employees, 15 of which are developers (including myself). A very frustrating aspect of the job is the IT security policy. As developers we need access to ...
25
votes
4answers
10k views

Should I report to HR and involve others if I am being wrongly accused of theft?

Today something weird happened to me at work - I was accused of stealing a ring by my company's security personnel. Of course, I didn't do it; I even helped my colleague to try to find the ring. My ...
24
votes
4answers
7k views

Is it reasonable to set up a hidden camera in one's office?

Someone I know --not me and not in my workplace-- has noticed a number of incidents of vandalism and petty theft in their office and in the offices of colleagues in nearby offices. Given that all ...
5
votes
4answers
3k views

How do I report the improper use of social security numbers at work?

At my workplace, my employer has a web based timeclock. At each location, we have a shared computer at the counter that employees use to clock in. The user ID that each person is assigned is their ...
1
vote
1answer
272 views

Can I ask a freelance agency to not send me my own personal info through email?

To be clear, I'm an independent contractor: people come to their website and ask for services, and I reply to the ones I can help with. If they decide to go with me, all payment goes through the ...
11
votes
5answers
2k views

Management is failing at enforcing their own security policies, what should I do?

At my current job, some of my duties are related to security. I know security and usability are inversely proportional, and because of that I have tried very hard to find the proper balance. I have ...
89
votes
3answers
11k views

How to let clients know that they are being spied on [closed]

In the past I have found out that clients were being spied on. This happened twice; in both times I told them. And in both times I got burned for it. I have no regrets and I got a clear conscience. ...
7
votes
8answers
8k views

Why would personal computers not be allowed at the office?

What are the reasons for forbidding bringing a personal computer to the office (not for primary work use, but disallowed in any case)?
0
votes
1answer
3k views

How much information should I give my former boss when I lost a company key? [closed]

I just ended my job and my last day was yesterday. I had lost my keys (I know, I'm bad) and informed the secretary who is encharge of them and she gave me a replacement set. The other day when I left ...
1
vote
4answers
729 views

Moving to new technologies when colleagues don't want to [closed]

I work with really old technology which takes ages to create websites. The security is also bad (tons of vulnerabilities such as XSS, CSRF...). How do I change to a better situation? The guy who ...
30
votes
11answers
7k views

Should the manager be CC'd when sending username and password to employee

I often create logins for new employees and then send them an email with their login credentials. While doing so I also CC their manager to let him know his user has been setup. Is this the right ...
17
votes
6answers
4k views

Revoking access privileges when someone leaves a job [closed]

I work in a start up company, with a very small team. This has been my first and only job since I graduated too. Recently, a person on design team left our company for greener pastures elsewhere and ...
7
votes
2answers
3k views

Employers installing keyloggers on work PC [closed]

I am in Canada. Is it legal for your employer to install a keylogger or other monitoring software on your workplace PC without informing you of this fact? Do I have any right regarding this?

1 2
3