Now Available:

line

Featured Resources:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Rebecca.

« Email is for "Old People": Do Lack of Laws Make IM and Texting Ripe for Exploiting Children & Teens? | Main | DHS IT Security EBK: Don't Complain After They Are Published...Comment On Them While You Can! »

Do Employers Need GPS And Logs When They Have YouTube and Facebook To Monitor Employees?

I don't know why I continue to be surprised at the stupid things some people do, but apparently some people will never realize how much of themselves they are giving away when they post their pictures and other personal information on the Internet. My friend Alec (thanks again, Alec!) pointed me to a perfect example of what a growing number of people are doing...apparently thinking their employers are not savvy enough to be able to use the Internet.

This is a story of an employee who sent an email to his office saying he couldn't make it to work, implying he had a family emergency when he actually went to a Halloween party, then posted his photo from the party (in full makeup and a blue and green fairy costume) on his Facebook page. This story includes copies of his email to his office saying he couldn't make it in to work, along with the reply.

Many organizations are now regularly scanning the Internet when doing checks on potential employees, along with doing regular checks for information about current employees. I have talked to two organizations who each even have a full-time position responsible for checking the Internet each day for information about not only their own company, but also about their employees.

According to an Execunet 2006 survey of 100 executive recruiters, 77% search the Internet for information about job candidates and use the information to decide whether or not to keep the candidates in consideration for the jobs. It's probably higher this year.

There are even new services springing up, such as Reputation Defender, to try to wipe the bad stuff off the Internet for people.

However, if people put this stuff out there once, it's likely they will put it out again after ReputationDefender does its best. And, there is nothing to prevent others from posting your photos and videos online.

Generally, what's posted on the Internet stays on the Internet.

With so many people willingly chronicling their lives, and the lives of others, online it seems like we may get to a point where looking online will tell what an employee is doing during the workday more accurately than the GPS and surveillance logs that are also widely used for monitoring.

TrackBack

TrackBack URL for this entry:
http://www.realtime-itcompliance.com/type/mt-tb.cgi/588

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Rebecca Herold's Bio:

Rebecca Herold,CISSP, CIPP, CISM, CISA, FLMI, has been providing information security, privacy and regulatory assistance and services to organizations from a wide range of industries for over 18 years. Rebecca was instrumental in building the information security and privacy program while at Principal Financial Group, which was awarded the CSI Information Security Program of the Year Award in 1998. IT Security ranked Rebecca as one of the top 59 IT security influencers, and Computerworld put Rebecca their list of the 25 top privacy experts and on their list of the 9 best privacy consulting firms. Rebecca has been CPO for two consulting organizations, and has had her own information privacy, security and compliance business since 2004. Rebecca has written chapters for several books, dozens of articles, and has been writing a monthly privacy column for the CSI Alert newsletter since the beginning of 2001, and is working on her 11th book. Some of her other books include The Privacy Papers, Managing an Information Security and Privacy Awareness and Training Program, The Definitive Guide to Security Inside the Perimeter (Realtime Publishers), The Shortcut Guide to Improving IT Service Support through ITIL (Realtime Publishers), and The Practical Guide to HIPAA Privacy and Security Compliance. In addition, Rebecca is the leader of The Realtime IT Compliance Community where she posts to her IT Compliance weblog. You can contact Rebecca at: rebecca_herold@realtimepublishers.net.