Have an Auditing System in Place

By Craig Palmore  |  Posted 2010-01-20 Print this article Print

Have an auditing system in place

One of the most common ways of preventing this security breach from occurring is to have an auditing system in place, which monitors who is doing what within the system. However, this is a classic case of shutting the stable door after the horse has been stolen. Having an auditing system in place, and publicizing this fact, will help to deter the malicious insiders of the corporate world. Harry knows he will get found out eventually, but this won't actually stop him from trying to get the dirt on his rival.

And, even if Harry is given the boot, no auditing system in the world can erase the sensitive information from Harry's mind. Even if the system security folks check Harry's laptop, flash drive and other information storage devices before he is shown the door in disgrace, they can't get rid of the hard-copy printout Harry has stashed in his files at home.

And, auditing systems won't stop the inexperienced operators of the corporate world from accidentally stumbling onto what they shouldn't. After what Jeff inadvertently did, he will probably get a dressing-down from his supervisor when the audit reveals all. This will probably be followed by a bit of retraining for Jeff so that the problem doesn't happen again.

Implement a job rotation system

Another method of preventing insider security breaches is to implement a system of job rotation or separation of duties. However, these systems are rather limiting, and can prevent business and communication from flowing smoothly. This is because they are designed to not let the right hand know what the left hand is doing. A personal assistant such as Jeff ends up wasting time going from person to person, trying to find out a few simple details. Job rotation is also detrimental to office morale, and is likely to create an atmosphere of suspicion and mistrust rather than teamwork.

Craig Palmore is a co-founder and the Director of Business Development at Engedi Technologies. His prior experience includes a variety of leadership positions in finance, technology and engineering companies. Before co-founding Engedi, Craig was a manager in the financial risk management group at PricewaterhouseCoopers. Prior to that, Craig worked at KMV Corporation, where he was responsible for marketing, sales, training and product support to clients representing commercial and investment banks. Earlier, at Swiss Bank Corporation, Craig assisted in the credit management of industry portfolios. Craig also co-founded an engineering consulting company in the early 1990s. Most recently, he was a co-founder of a financial technology company in New York City, serving the needs of commercial banks and fund managers. Craig received a B.S. in Civil Engineering from the Virginia Military Institute, and served six years active duty with the United States Navy Civil Engineer Corps, with duty assignments in Washington DC, Antarctica, Micronesia, and Hanoi, Vietnam. Craig is a licensed Professional Engineer in the State of Virginia, and received his MBA from the Fuqua School of Business at Duke University. He can be reached at palmore@engedi.net.

Submit a Comment

Loading Comments...
Manage your Newsletters: Login   Register My Newsletters

Rocket Fuel