Introduction
Throughout this discussion I will address the cybersecurity risks
involved in the employment of the seasonal workforce and the
things managers may consider changing or keeping the same in
their hiring and employment practices. c Consideration must
always be given to what is the minimum and maximum access
needed for employees to accomplish their daily tasks while
ensuring that the company maintains a secure posture.
Analysis (supported by readings / research and citations)
Do you agree or disagree with the author's assertions regarding
seasonal employees and cybersecurity risks in the work place?
Why?
I agree with the author's assessment of the possible risks to
cybersecurity when employing a seasonal workforce. The
question is not should companies employ a seasonal workforce,
but how can they safely and successfully train and employ a
workforce in a mutually beneficial model. c The seasonal
employee could create the highest risk to a company's finances,
data, and networks when a company has not developed a formal
initial training program, a standard for vetting and validating the
required employee access by work role (access control lists or
user groups), and a transparent onboarding process where all
employees are treated equally. c In some cases managers forget
that even the minimum network access is still access, and opens
the doors for the loss of vital data. c Training, accountability, and
a positive work environment are all vital to improving the
cybersecurity of a seasonal workforce (Bonderud et al., 2021). .
What steps can (should) managers take to reduce security risks
associated with hiring seasonal or temporary employees?
(Consider whether or not the Secure Computer User training
course would be appropriate for these employees.)
Managers can take several steps to reduce security risks
throughout the hiring and onboarding process. c The first step in
risk mitigation would be to conduct background checks on
individuals being considered for employment prior to the
interview process. c Knowing the background of a possible
employee may assist in defining what role you are willing to
hire a person to fill. c The next step would be to require
employees to attend a version of cyber and information systems
awareness training, either computer-based training, formal
briefings and instruction, or a mentorship program with left seat
/ right seat hands on training program to name a few. c Next
would be to have each individual sign a user's agreement stating
they have been trained and understand what they are allowed
and not allowed to do on company systems. c Managers should
coordinate with IT managers to ensure work role-based access
containers are created to ensure each work role only has access
to the information or data that is required for accomplishing
their daily tasks. Another consideration is once the individuals
are trained and given access to the networks of data needed to
conduct daily business they must feel like part of the team. c If
a seasonal employee is constantly reminded that they are only
seasonal staff their morale and work outputs can be diminished
and possibly lead to finding ways to retaliate against the
employer. c Insider threats are always a concern in cybersecurity.
An unhappy employee can tear down a network just as quickly
as an untrained employee. c Managers must find ways to make
each person feel like they are part of the overall team at all
levels and their opinions and ideas matter regardless of their
term of employment. c The feeling of being part of the team has
proven time and again to improve employee sense of fulfilment
in their job and increased loyalty to their current employer.
How can managers show leadership in cybersecurity defenses
and best practices?
Managers can show leadership in cybersecurity by ensuring that
all cybersecurity training is completed and holding themselves
and all employees to the same standards. Managers can be at
the forefront of the training process by attending or providing
the training during onboarding on new employees and security
refresher training for permanent staff members. c c Managers
must also hold all employee accountable at the same levels with
equal treatment among all employees when considering rewards
or reprimands.
Summary or Conclusion
In summary, cybersecurity has quickly become a primary concern
at all levels of the world economy. c Companies spend millions of
dollars on software and hardware to protect their networks and
data. c However, the strongest defenses are only as good as
their weakest link, which in the case of information technology c c
and cybersecurity is the end user. c Training and understanding
must be at the forefront of the corporate training model. c It
doesn't matter how well a person understands the specific job if
the systems that support those efforts are constantly exposed to
threats by unaware or untrained users.
References
Bonderud, D. (2021, August 31).
Seasonal Employee Security
Risks: Present Danger, Proactive Defense
. Security Intelligence.
https://securityintelligence.com/seasonal-employee-security-risks-
present-danger-proactive-defense/
2018 State of Cyber Resilience, Accenture.
https://www.accenture.com/in-en/insights/security/2018-state-of-
cyber-resilience-index
Security Awareness Training Explosion, Cybersecurity Ventures,
February 6, 2017.
https://cybersecurityventures.com/security-awareness-training-
report/
