Most companies rely day-to-day on computer systems and networks for their business operations. Concomitantly, they allow their employees access to these computer systems to conduct the company’s business. But herein lies the rub: How much access should your employees have to the company’s information system to do their jobs? Routinely, we have seen companies that allow employees unfettered access to all of the company’s information without any level of security. Even in cases where some security is in place with passwords, all employees with passwords have access to everything contained in the company’s database.
In today’s technology environment and competitive marketplace, this is a recipe for disaster. All it takes is one rogue employee or a cluster of rogue employees to systematically duplicate or remove your company’s sensitive information for their gain, or for the benefit of competitors, and the damage will ensue before you can seek relief in court. And even though the courts could offer some assistance, due to the framework of statutes and laws that give companies protection in these situations, your business can be crippled to the point of no repair by the time “justice” is done. This article highlights key issues to keep in mind when providing employees access to your computer systems.
