CONTACT .

October 2008

IN THIS ISSUE:
 • In the Spotlight, by David A. Linsky
 • Computer Forensics, by Ken Lacasse
 • SSC News!

QUICK LINKS:
 • www.sscintel.com
 • www.securessc.com

Managing Telecommuting Risks

When we think of risk in telecommuting, we immediately think of IT security considerations. While security is certainly a significant factor, the issue of managing risk posed by employees working from remote or home sites is far ranging. To effectively manage risk in this growing workplace evolution, clear policies will be required to address a host of vital issues. The recent soaring cost of gasoline will undoubtedly continue to drive telecommuting as a new norm while workers and companies look at telecommuting as a means to curb transportation costs and retain workers in the face of record-high gasoline prices.

Telecommuting >

Upcoming Events
SSC Speaking Engagements

SSC can speak on a wide array of security topics. Some topics include: Hiring Risks, Workplace Violence, Training, Risk Assessments, Litigation Support, Computer Forensics, Investigative Services and more. SSC can speak via webinar or in person at one of your meetings, seminars or events. If interested, please contact Beth Gabriel at (203) 925-6148.

 

< e-Newsletter home   |   Recommend SSC Security Matters to an associate   |   All content © 2008

Managing Telecommuting Risks
by David A. Linsky — CEO, SSC, inc.

When we think of risk in telecommuting, we immediately think of IT security considerations. While security is certainly a significant factor, the issue of managing risk posed by employees working from remote or home sites is far ranging. To effectively manage risk in this growing workplace evolution, clear policies will be required to address a host of vital issues. The recent soaring cost of gasoline will undoubtedly continue to drive telecommuting as a new norm while workers and companies look at telecommuting as a means to curb transportation costs and retain workers in the face of record-high gasoline prices.

A 2007 survey released by the Society for Human Resource Management, an association of company human resources managers, revealed that 48 percent of employers offer an option to tele-work at least one day per week. Despite the rapid increase in telecommuting as a corporate practice, awareness of the potential liabilities and risks remains low. Policy considerations about who should be allowed to telecommute are best left to business owners and executives, but once the decision to allow telecommuting is made, those business owners and executives assume a host of challenges and potential liabilities.

Some telecommuting concerns to think about from a risk standpoint are below:

• Workplace safety and liability issues of home office modifications: OSHA states that employers are responsible for ergonomic and safety measures for all employees regardless of where the work is being done.
• What inspection process exists to insure a safe workplace in the employee’s home? Items to consider are electrical wiring, personal housekeeping and ergonomics.
• Employee Performance Monitoring: Is the Work Being Done? What type of metric is being used use to determine if the remote worker is producing enough work in a reasonable amount of time?
• Unknown Persons in the Workspace: Who else may be in the employee’s workspace and what are their intentions? What is the policy on non-employee visitors to the workspace? Shoulder- surfers watching employees enter IDs and passwords present very real threats to business systems and data.
• Unknown Persons Using Company Equipment: Who has access to the company equipment and the data being used by the employee? Are children or others able to access the system?
• Unknown Activity by Employee: From the employee’s home, information can be damaged, copied or just accessed in an unauthorized manner. Unethical employees can feel safer in their own surroundings and can engage in activity against the business’ best interests, bringing the legal liability of the business at risk. It has been found that many IT departments have less control and oversight of remote users.
• Real Security Risk: The potential exists that intruders will be able to access business systems without having to be onsite.
• Potential Data Theft: Most corporate facilities have safeguards in place for onsite employees; however, in the case of telecommuters, the ability to block key pieces of software and viruses while directly connected to the network may be lost for the remote worker.
• Employee Discipline and Termination: In the event of an HR action, what plan is in place to protect and obtain company resources like computer equipment and other electronic peripherals?

While none of these potential risks is unmanageable, they do require thoughtful planning. We believe that there are a number of methods and processes that can be applied to effectively manage the risk and garner the benefits of telecommuting. Of primary importance are taking the time to fully define your corporate telecommuting program, establishing goals and the scope of the program, creation of processes and policies and a proprietary method of inspecting telecommuting sites.

© 2008 SSC, Inc.

Experienced, pro-active, and dedicated to your business.  Contact SSC for a confidential Security Consultation.  Our e-Newsletter: SSC Security Matters.