Tag Archives for corporate_policies

Porn found on 1 in 4 corporate computers

A recent study from PixAlert, found pornography on one in four PCs despite the use of content filtering technology at the gateway.

PixAlert audited 10,000 PCs on 125 business and public sector networks over the last 9 months. The study found that 25% of the computers contained pornography or “other inappropriate images.” The same audit found that 12.4% of the 12,000 e-mail accounts and 5.4% of 26,000 file server shares scanned were similarly affected.

“With over a third of all images found created in the last 12 months, it is clear that a significant number of employees continue to ignore corporate policies and in some cases are going to extraordinary lengths to bypass protection systems in order to obtain and distribute inappropriate material,” said Andy Churley, a director at PixAlert, in a written statement. “Corporate officers wrongly assume that boundary protection systems stop all digital pornography from entering the organization but, in PixAlert’s experience, almost all corporations will have a significant amount of pornography on their networks.”

The study found that 46.8% of the images showed full nudity or sexual activity and 0.3% of all the images were determined to be illegal. While 35% were downloaded online images, 45.2% of the images detected came from e-mails. The study also found that 35.5% were sent internally.

“While all organisations actively discourage access to inappropriate images at work, our audits show that the reality is that all establishments have a lot of digital pornography residing on their networks that they don’t know about. Companies are particularly concerned when they have visibility of the number of pornographic images being distributed by e-mail internally or sent out to other organisations using a corporate e-mail address.” said Churley.
Source: InformationWeek, 17 April 2007

Email monitoring: the balancing act

The introduction of email has brought many benefits to organisations. One main benefit is having the capability to monitor email use by capturing communication metrics through which companies can then act in producing usage policies and provide education to try and reduce wasted resources and improve employee productivity. However, email monitoring also has complex ramifications on the organisation and on its workforce in terms of maintaining a balance between the protection of the employer and for its employees.

In other words, getting the right balance between allowing the organisation to continue business operations and not upsetting staff by invading their privacy rights or by using over-invasive monitoring methods that may affect staff morale and performance. Careful consideration and planning by both management and staff representatives is needed to evolve corporate policies to maintain this correct balance.

Key recommendations for Email Monitoring

Below is a list of 9 key recommendations for Email Monitoring:

1. Conduct an Impact Assessment to identify the business purpose for email monitoring and confine it to what is necessary to accomplish that purpose. Monitoring should only be used as necessary and not be intrusive on the employees’ email communication.

2. Develop, or modify, corporate policies that cover email use (such as the Acceptable Use Policy, Information Security Policy and/or Computer Use Policy). Make sure that all users accept these policies and they are documented.

3. Train users on current best practices of email management and use.

4. Allow management to appraise their staff regarding email use and what standards will be used to evaluate their performance.

5. Enforce and police all policies regarding email use at all times.

6. Consider which email monitoring tools are appropriate for the organisation. Only implement when supporting processes, procedures and resources are in place.

7. Frequently review and update corporate policies to ensure they fully comply with the law and regulations, and any changes thereafter.

8. Communicate any changes of policy to all email users and management.

9. Thoroughly consider the costs of excessive monitoring, such as ethics, low morale, high turnover, and potential lawsuits.


Other Recent Posts:

  1. Email Compliance and the use of Email Filtering - 31st Dec 2007
  2. Email spam - becoming sound practice! - 7th Nov 2007
  3. Email Security (Encryption) 2007 Review - 2nd Oct 2007
  4. Lost emails cause 5m hours of IT Management time - 25th Sep 2007
  5. Turning your email address into a phone call - 6th Sep 2007
  6. links for 2007-08-21 - 21st Aug 2007
  7. Sitemap - 21st Aug 2007
  8. Trend Micro joins the SaaS team for email protection - 14th Aug 2007
  9. E-mail stress keeps 1 in 3 workers on edge of Inbox - 13th Aug 2007
  10. links for 2007-08-07 - 7th Aug 2007
  11. links for 2007-07-31 - 1st Aug 2007
  12. links for 2007-07-27 - 27th Jul 2007
  13. Over 50% of UK business users are hooked on their inboxes - 24th Jul 2007
  14. Proofpoint - Outbound Email and Content Security 2007 Report - 24th Jul 2007
  15. Anti-spam products are failing users - 24th Jul 2007