Security restrictions acceptable

Most employees don’t complain about security restrictions.

A new survey by Robert Half Technology showed that just 12% of Chief Information Officers (CIOs) say it is common for employees to complain about security measures that limit which websites or networks they can visit at the office.

29% said that such complaints are somewhat common, while the majority – 58% – said that these complaints are not common.

“There will always be employees who feel IT security policies are too restrictive,” John Reed, executive director of Robert Half Technology, said. “But in most situations, robust information security measures are necessary to protect sensitive data and an organisation’s network integrity from increasingly sophisticated threats.”

However, Reed noted that companies with a high volume of complaints from employees about web or network access may need to reach a compromise, particularly if overly restrictive policies are standing in the way of productivity.

On the other hand, Carol Carlson, editor of FierceCIO, an online magazine, said this may not be the time for companies to increase their vulnerability for the sake of employee access to the web as network security threats grow in volume and sophistication.

Tips to improve your understanding of IT policies around network security and web access (source: Robert Half Technology):

• Don’t be afraid to ask. Some policies may simply be outdated and no longer make sense. Asking someone in your organisation’s IT department why access is restricted is often one of the quickest ways to resolve an issue.
• Make a business case. If employees can’t access a client’s website or a professional networking site that can generate business, it will probably be an easy case to make. However, if the case isn’t that straightforward, be prepared to discuss how access to a site or network will help the business grow and why it’s necessary.  
• Listen. Even seemingly simple requests for access may be denied, but for good reason. It’s critical that workers understand IT security professionals are concerned with security across an organisation. Allowing access to certain websites, even if justified from a business perspective, could be too risky enterprise-wide.    
• Compromise when necessary. If you have a strong business case to relax a particular IT restriction, but your IT security team thinks the risk is still too great, be ready to ask if there is a suitable compromise. They might offer another solution, such as setting up a computer with Internet access, but not connected to the company’s network.

Your comment