1. Do you agree or disagree with the author's assertions regarding
seasonal employees and cybersecurity risks in the work place? Why?
I agree with the author on their take that seasonal employees are a
potential risk factor regarding cybersecurity. With the increase of
technology in all workplaces, it is highly likely that even seasonal hires
will use technology and need access to a certain level of private
company information. With the need for the manpower to quickly be
ready to work, it can be likely that some steps get skipped/forgotten
during the setup phase of an account. Even when those employees leave,
the busy nature of the season can result in potential vulnerabilities in
security.
2. What steps can (should) managers take to reduce security risks
associated with hiring seasonal or temporary employees? (Consider
whether or not the Secure Computer User training course would be
appropriate for these employees.)
Cybersecurity training for all employees, not just IT, should be
raised in the modern age. The current state of having such a large
amount of systems and sensitive data being hosted online creates a
larger need for all players to be up to date on security practices.
While seasonal employees may not necessarily need the training
someone in the IT field would, it is still essential that they
understand a basic overview of cyber security and are trained
accordingly. The Secure Computer User training course would not
be appropriate for these employees. A shortened, summarized edition
of the main points would be appropriate, but the length of the
course is excessive for the term length of these employees. The
course seems more setup for one directly working in the IT field,
not other users.
3. How can managers show leadership in the area of cybersecurity
defenses and best practices?
Managers can show leadership in the area of Cybersecurity defenses by
practicing them personally and enforcing these policies sternly. If the
manager, who is supposed to be the face of the policies put in place,
fails to follow said policies, then users will feel that the issue is not
such a large deal and ignore policies when they inconvenience them.
Setting an example is always a strong way to inspire subordination.
Enforcement is also crucial, as it keeps the rules on users’ minds.
Constant and fair enforcement ensures that security is seen as the
forefront of networked interactions. Lack of enforcement creates a
relaxed, laissez-faire attitude around the company, which will inevitably
result in increased vulnerabilities and mistakes.
