Questions tagged [security]

Security is the degree of resistance to, or protection from, harm. Workplace questions should only be tagged with this if they relate to actual security concerns (physical or digital) and are specific to the workplace. See extended tag info for usage guidelines.

Filter by
Sorted by
Tagged with
0
votes
1answer
509 views

Is it good practice to sign not very important documents in a shared environment?

I learned about signing documents, so that we can assure integrity and the author attribution. In my company, we already use SharePoint which assigns documents to their creators, and also track last ...
0
votes
1answer
165 views

Communicating with prospective vendor about official documents

My manager and senior management at my company has requested due diligence feedback on a prospective vendor our company is thinking of doing business with. It is the same company I asked about in this ...
0
votes
1answer
2k views

How much information should I give my former boss when I lost a company key? [closed]

I just ended my job and my last day was yesterday. I had lost my keys (I know, I'm bad) and informed the secretary who is encharge of them and she gave me a replacement set. The other day when I left ...
0
votes
4answers
243 views

Is reasonable right to privacy interpreted solely by policy, or are there limits within UK Law as to what is permitted? [closed]

We have a Data Protection Officer who is quite senior; and should, on paper, know the intricacies of EU/UK Data Law. However, they often make questionable choices that are challenged by other ...
0
votes
2answers
237 views

How to convince manager of need for additional security testing before release [closed]

I work in the InfoSec profession as an IT auditor. One of my duties at work is testing and verifying that necessary security requirements are in place before code and application updates are released ...
0
votes
1answer
197 views

Sharing promotion letter from an old employer

I am currently searching for a job. Can I include the promotion letter from my old employer in my portfolio? It includes words of appreciation, new designation, and allowance.
0
votes
3answers
408 views

Separating work and personal accounts

How to separate personal and professional accounts? Everyone knows it's a good practice to separate personal and professional emails, but when talking about online accounts things get murkier. I ...
0
votes
5answers
2k views

Is it acceptable to leave laptop in locked car? [closed]

I was issued a high-end Mac laptop to perform my work. I was told that I should take the laptop to and from the office with me. Often on my way home form the office I stop by the grocery store or ...
0
votes
1answer
115 views

How to request colleague assistance for on call support during manager vacation?

I recently joined the information security team at my employer about a month ago. Just this week, I started to participate in off hours on-call support as security must be available on a continuous ...
0
votes
1answer
147 views

Is it ok if I ask the employer for the contract iI have not signed yet

I have been given a job offer for a job in another country (Chiang Mai, Thailand), it is the first time I work abroad so I am not sure what to do to secure myself, should I ask for a signed contract ...
-1
votes
3answers
767 views

Would a big security breach destroy a programmer's career? [closed]

I am a programmer. I heard about Ccleaner security breach, I think Ccleaner is dead by now, who would trust such apps, one security breach destroyed a well known company. I guess the manager would be ...
-1
votes
2answers
15k views

Lost my company ID card on first week of work. How to report this to my supervisor? [closed]

Update Luckily, a colleague found my card and handed it back to our secretary. Seems that I forgot it in a meeting room. Thanks everybody for the suggestions anyway. I started to work in a new ...
-1
votes
1answer
280 views

Client's convoluted security measures are creating bigger risks, how to rebuild but preserve the original intent? [closed]

Accessing this client's system is a convoluted process, and parts of their infrastructure are unreliable. The original intent of this setup was that there would be layers of access to prevent people ...
-1
votes
3answers
190 views

How to better track identities within company? [closed]

One of my responsibilities at work is to perform periodic user access reviews. A frustrating problem has been inconsistent to poor documentation,such as it becomes difficult to map users to roles. ...
-2
votes
2answers
547 views

How a cloud data center company hires security guards [closed]

In reading a little about cloud security on platforms such as Amazon Web Services (AWS) or Google Cloud, I realize they have to hire security guards in addition to having the software-level and ...
-2
votes
2answers
187 views

Providing a security plan for a client [closed]

I started a small business that provides a web application to clients, and a new customer asked for a security plan. I've never written one before. I understand that security plans can vary in ...
-3
votes
5answers
2k views

How to use personal accounts like Github on work computers? [closed]

I'm a software engineer and I use Github for all of my personal/open-source and work related stuff. In my new job, the IT department insists on giving us laptops without full admin access and I ...
-3
votes
2answers
5k views

How do I wear my badge (work tag) on my trousers? [closed]

I wear my badge (work tag with embedded RFID identification chip) around my neck, but I see some people have it mounted to the upper part of the trouser. I would like to do that, but I don't know how. ...
-3
votes
2answers
225 views

Dealing with a development VM with no internet connection [closed]

I recently just started working at a company that is going to change the way their employees develop code. They are switching from one machine (VM) that does everything, meaning communicate to other ...
-4
votes
4answers
551 views

Information Security hiring

I was discussing an issue with an ex-colleague. He is currently assisting (as an HR member) with hiring for an Information Security department, where the Information Security team are responsible for ...
-6
votes
1answer
200 views

Are incorrect login attempts logged in by the website or company [closed]

When you put in an incorrect user id and/or password , do companies/websites keep a record of that? Like for example Joe1 had an incorrect login attempt at this time? And if so how long do they keep ...
-6
votes
1answer
174 views

The kind of safe a large company uses for important documents [closed]

Wondering what a larger company with resources uses to store important potentially confidential documents. Or what is recommended as best practices if most companies don't typically adhere to them. ...
-7
votes
3answers
392 views

How to respond to third party (vendor) theft and fraud? [closed]

Our organization acquired a software from a software engineer (Alice). Alice designed the software to take 2% off the top of all transactions and place it into her bank account. If we complained to ...