Questions tagged [security]

Security is the degree of resistance to, or protection from, harm. Workplace questions should only be tagged with this if they relate to actual security concerns (physical or digital) and are specific to the workplace. See extended tag info for usage guidelines.

Filter by
Sorted by
Tagged with
2
votes
3answers
4k views

Recruiter asking for last 3 digits of SSN, day and month of birth [duplicate]

The recruiter says they will need it to create my security ID as the role is through a vendor management system. Does this sound legit?
2
votes
3answers
626 views

How to help new team member with security best practices without escalation to management

I currently work on the Information Security team at my employer and have been working at my company for about 4 years. Recently a new member joined the team, who per his resume has about 1.5 years of ...
2
votes
1answer
933 views

Adding a home address to an LLC - real home address vs PO box vs private mailbox service

Can someone provide insight on the pros/cons of registering a business using (1) a real home address vs (2) a PO Box vs (3) a private mail service? The company is a small software consulting business/...
1
vote
4answers
1k views

Is it an acceptable practice for IT to ask an employee for their password over Skype Messenger?

I got an email saying my password would expire in a few days, so I clicked on the link in the email and updated it. After doing so, I realized I could no longer log in to my computer, except by ...
1
vote
3answers
2k views

I'm a freelancer and my boss fired me without real reason. How can I secure my work? [closed]

Yesterday my boss fired me (I'm still in for one or two days) because of a pretty heated discussion that involved management steps and ideas. We are very far into the beta development stages. I ...
1
vote
3answers
1k views

My company sends honeypot phishing email; should I automatically junk them?

My company sends honeypot phishing emails from within our organization in Microsoft Outlook. e.g. hr@mycompanyname.com , ithelpdesk@mycompanyname.com , etc. I fell to one of these in a lapse of ...
1
vote
2answers
978 views

My manager wants to create an administrator account on my work computer that only he has the password to [closed]

This is on a Windows 10 system, that is provided to me by work. They want to create an administrator account that only my manager will have the password to. The thing is, this isn't from IT and it's ...
1
vote
3answers
879 views

Addressing client's security and controllability concerns

After events described in this question, my team and I decided to start our own company (limited liability). So far we are still going through setup procedures, and we are currently working with ...
1
vote
2answers
491 views

Can poor performance in optional , but work sponsored activities hurt my standing in the company?

For National Cybersecurity Awareness Month in October, my employer is sponsoring a secure code warrior competition where teams who sign up are presented with software code with security ...
1
vote
4answers
729 views

Moving to new technologies when colleagues don't want to [closed]

I work with really old technology which takes ages to create websites. The security is also bad (tons of vulnerabilities such as XSS, CSRF...). How do I change to a better situation? The guy who ...
1
vote
4answers
426 views

Using MFA on client owned computer

I have had a pretty long-term relationship with a client. We develop medical applications and part of our arrangement is that they lent me a dedicated computer to use for all the work I do with them. ...
1
vote
1answer
672 views

37 years old with a psychology bachelors and work history in restaurant management [closed]

I have been wanting to change careers from being in the restaurant/hospitality industry for a few years now, but I did not want to choose a new career path without being absolutely sure that I was ...
1
vote
1answer
368 views

Personal e-mail obtained due to compromised work account (GDPR) [closed]

At my current place of work a phishing e-mail was sent from an employee's e-mail address (Let's call them Sally). An e-mail originating from Sally's account was sent to everyone's work e-mail within ...
1
vote
2answers
530 views

Should I speak to my boss about Security Measures when my Internship is ending?

I'm currently in a 9 month internship in a small/medium sized company. On my first day in this job, I've been assigned to solo develop an application. I did, and the application is currently working ...
1
vote
1answer
419 views

How could I have handled my colleagues unavailability during security incident response better?

I work as a security engineer / security analyst on the IT Security team at my workplace. One of my core job duties is triaging , remediating / containing, and as necessary, escalating of security ...
1
vote
3answers
203 views

Value of intermediate status to certification in cybersecurity profession - Associate ISC^2

In the past year, I successfully passed the CISSP exam administered by ISC^2 . The CISSP certification is highly reputable and the most widely recognized certification amongst IT Security ...
1
vote
1answer
272 views

Can I ask a freelance agency to not send me my own personal info through email?

To be clear, I'm an independent contractor: people come to their website and ask for services, and I reply to the ones I can help with. If they decide to go with me, all payment goes through the ...
1
vote
0answers
91 views

Should I give my SSN to recruiter? [duplicate]

I got call from recruiter and he said I should give him my SSN in order to apply to job. From his email: As part of our disclosures and to present you as a qualified Candidate to [Company Name], ...
0
votes
6answers
886 views

Secure code review requirement for cybersecurity engineer hiring

I am the team lead on the IT Security team where I work. Recently we were interviewing for an security engine role. One of the traditional security / SOC engineer roles in all the places I worked is ...
0
votes
2answers
197 views

How to communicate with checkbox-tickers about CMS choices [closed]

A web department develops a lot of CMSes using developer-friendly tools and frameworks, mostly using open-source technologies. They are being asked to develop and support a website using Sharepoint ...
0
votes
3answers
510 views

How to get the attention of operations manager as a junior?

The software development company I work for has around 40-50 employees with about 12 of those being developers. I work as a junior developer and have been working for about a year after completing an ...
0
votes
2answers
652 views

Job offer was rescinded due to security clearance?

My husband received a conditional offer for a job that required security clearance. After they investigated him the report has "No Determination Status. Therefore the job offer was rescinded. We are ...
0
votes
1answer
387 views

Github permission issue from developer's perspective when working on someone else's Organisation [closed]

I am working on a project where the company seems suspicious to me. It's a remote job. They invited me to their Organisation and I accepted it on my Github. They have Android, iOS & Backend ...
0
votes
3answers
260 views

Switching from software developer to infosec/pentester [closed]

About a week ago I had a chance to observe the workflow and talk with team of incredibly talented and young hackers, they were pentesting our system and dug up 4 security holes within a day. What I ...
0
votes
2answers
655 views

Is participation in different bug hunting programs viable career path and source of income?

Is participation in different bug hunting programs viable career path and source of income? More specific questions: What are estimated, expected earnings of bug hunters? How long one needs to train/...
0
votes
2answers
1k views

Voluntary self identification of a disability form - should I discose my RA? [closed]

I have rheumatoid arthritis. Should I fill out the "voluntary self identification of a disability" form? I have worked for this company over 20 years. We do have a functional abilities test that ...
0
votes
1answer
540 views

Is it good practice to sign not very important documents in a shared environment?

I learned about signing documents, so that we can assure integrity and the author attribution. In my company, we already use SharePoint which assigns documents to their creators, and also track last ...
0
votes
1answer
167 views

Communicating with prospective vendor about official documents

My manager and senior management at my company has requested due diligence feedback on a prospective vendor our company is thinking of doing business with. It is the same company I asked about in this ...
0
votes
1answer
3k views

How much information should I give my former boss when I lost a company key? [closed]

I just ended my job and my last day was yesterday. I had lost my keys (I know, I'm bad) and informed the secretary who is encharge of them and she gave me a replacement set. The other day when I left ...
0
votes
1answer
326 views

Retraining for cyber security. What's the quickest way into the field? [closed]

I’m 26 and I recently graduated with a bachelor's degree in psychology, but it hasn’t proven to be useful in finding a job. I understand there are a lot of job opportunities (with many specializations)...
0
votes
4answers
253 views

Is reasonable right to privacy interpreted solely by policy, or are there limits within UK Law as to what is permitted? [closed]

We have a Data Protection Officer who is quite senior; and should, on paper, know the intricacies of EU/UK Data Law. However, they often make questionable choices that are challenged by other ...
0
votes
2answers
252 views

How to convince manager of need for additional security testing before release [closed]

I work in the InfoSec profession as an IT auditor. One of my duties at work is testing and verifying that necessary security requirements are in place before code and application updates are released ...
0
votes
2answers
453 views

Separating work and personal accounts

How to separate personal and professional accounts? Everyone knows it's a good practice to separate personal and professional emails, but when talking about online accounts things get murkier. I ...
0
votes
1answer
197 views

Sharing promotion letter from an old employer

I am currently searching for a job. Can I include the promotion letter from my old employer in my portfolio? It includes words of appreciation, new designation, and allowance.
0
votes
5answers
4k views

Is it acceptable to leave laptop in locked car? [closed]

I was issued a high-end Mac laptop to perform my work. I was told that I should take the laptop to and from the office with me. Often on my way home form the office I stop by the grocery store or ...
0
votes
1answer
217 views

How to request colleague assistance for on call support during manager vacation?

I recently joined the information security team at my employer about a month ago. Just this week, I started to participate in off hours on-call support as security must be available on a continuous ...
0
votes
1answer
166 views

Is it ok if I ask the employer for the contract iI have not signed yet

I have been given a job offer for a job in another country (Chiang Mai, Thailand), it is the first time I work abroad so I am not sure what to do to secure myself, should I ask for a signed contract ...
-1
votes
3answers
788 views

Would a big security breach destroy a programmer's career? [closed]

I am a programmer. I heard about Ccleaner security breach, I think Ccleaner is dead by now, who would trust such apps, one security breach destroyed a well known company. I guess the manager would be ...
-1
votes
2answers
21k views

Lost my company ID card on first week of work. How to report this to my supervisor? [closed]

Update Luckily, a colleague found my card and handed it back to our secretary. Seems that I forgot it in a meeting room. Thanks everybody for the suggestions anyway. I started to work in a new ...
-1
votes
1answer
476 views

How to get team members to be more open with their opinions regarding architecture?

I have recently joined the architectural review board (ARB) at the place where I work serving as the security representative. The role of the ARB is to recommend and approve software design ...
-1
votes
1answer
288 views

Client's convoluted security measures are creating bigger risks, how to rebuild but preserve the original intent? [closed]

Accessing this client's system is a convoluted process, and parts of their infrastructure are unreliable. The original intent of this setup was that there would be layers of access to prevent people ...
-1
votes
3answers
192 views

How to better track identities within company? [closed]

One of my responsibilities at work is to perform periodic user access reviews. A frustrating problem has been inconsistent to poor documentation,such as it becomes difficult to map users to roles. ...
-1
votes
1answer
719 views

If a private company has been targeted by ransomware do they need to make this detail public?

What responsibility does a company have after they have fallen victim to a targeted hack/ransomware attack? And what responsibilities does an individual have if they know of such as issue, which is ...
-2
votes
2answers
566 views

How a cloud data center company hires security guards [closed]

In reading a little about cloud security on platforms such as Amazon Web Services (AWS) or Google Cloud, I realize they have to hire security guards in addition to having the software-level and ...
-2
votes
2answers
219 views

Providing a security plan for a client [closed]

I started a small business that provides a web application to clients, and a new customer asked for a security plan. I've never written one before. I understand that security plans can vary in ...
-2
votes
1answer
158 views

Need Advice On Cyber Security Career Path [closed]

I'm an amateur hacker with a solid experience in full stack and programming. I recently decided to chase after my dream job and transitioned to the Cyber industry. I applied to a few companies and ...
-3
votes
5answers
3k views

How to use personal accounts like Github on work computers? [closed]

I'm a software engineer and I use Github for all of my personal/open-source and work related stuff. In my new job, the IT department insists on giving us laptops without full admin access and I ...
-3
votes
2answers
6k views

How do I wear my badge (work tag) on my trousers? [closed]

I wear my badge (work tag with embedded RFID identification chip) around my neck, but I see some people have it mounted to the upper part of the trouser. I would like to do that, but I don't know how. ...
-3
votes
2answers
238 views

Dealing with a development VM with no internet connection [closed]

I recently just started working at a company that is going to change the way their employees develop code. They are switching from one machine (VM) that does everything, meaning communicate to other ...
-4
votes
4answers
599 views

Information Security hiring

I was discussing an issue with an ex-colleague. He is currently assisting (as an HR member) with hiring for an Information Security department, where the Information Security team are responsible for ...