Now Available:

line

Featured Resources:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Rebecca.

« The Area With The Most Customer Contact Usually Has The Least Information Security and Privacy Training | Main | People Need Periodic, Effective, Training And Ongoing Awareness To Truly Safeguard Information »

Call Center Folks Have Huge Amounts Of Access TO PII

Need more reasons from my post from yesterday about why call centers need targeted training and ongoing awareness?

If so, then here is the second part of the third article, "Providing Call Centers with Information Security and Privacy Education," in my July issue of IT Compliance in Realtime...

-----------------------------------
Call Center Staff Have Access to Sensitive Information

When you stop to think about it, call center staff have access to huge amounts of sensitive information and PII. Having access to all this information can be a significantly massive risk when you consider the insider threat and all the possible types of actions that staff can perform to cause an information security incident or privacy breach with their authorized access. Massive breaches could easily occur as a result of mistakes, lack of knowledge about how to safeguard information, and malicious intent.

Call Center Staff Answer Breach Questions

Call center staff are commonly and increasingly used to answer questions from impacted individuals whose PII was involved in a privacy breach. It is critical for call center staff to know how to appropriately answer these questions so that they do not exacerbate the situation, elevate the breach to an even more damaging level, or give out information about the breach that would damage the associated investigation.

Call Center Staff Want to Make Customers Happy

Another important point to keep in mind is that call center staff have usually had a tremendous amount of customer service training, most of which emphasizes that the customer is always right, and that they must always make the customer happy. It is often counterintuitive for call center staff to be expected to provide safeguards for PII and not give out too much information when they have had it drummed into their heads that they must give the customer, whomever calls them, anything that they ask for!

Call Center Functions Are Often Outsourced

Be sure you do not forget about your outsourced call center personnel! They are just as, and in many ways more, important for providing information security and privacy training and awareness communications. Be sure you also include training and awareness requirements within your outsourcing contracts.

-----------------------------------

TrackBack

TrackBack URL for this entry:
http://www.realtime-itcompliance.com/type/mt-tb.cgi/771

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Rebecca Herold's Bio:

Rebecca Herold,CISSP, CIPP, CISM, CISA, FLMI, has been providing information security, privacy and regulatory assistance and services to organizations from a wide range of industries for over 18 years. Rebecca was instrumental in building the information security and privacy program while at Principal Financial Group, which was awarded the CSI Information Security Program of the Year Award in 1998. IT Security ranked Rebecca as one of the top 59 IT security influencers, and Computerworld put Rebecca their list of the 25 top privacy experts and on their list of the 9 best privacy consulting firms. Rebecca has been CPO for two consulting organizations, and has had her own information privacy, security and compliance business since 2004. Rebecca has written chapters for several books, dozens of articles, and has been writing a monthly privacy column for the CSI Alert newsletter since the beginning of 2001, and is working on her 11th book. Some of her other books include The Privacy Papers, Managing an Information Security and Privacy Awareness and Training Program, The Definitive Guide to Security Inside the Perimeter (Realtime Publishers), The Shortcut Guide to Improving IT Service Support through ITIL (Realtime Publishers), and The Practical Guide to HIPAA Privacy and Security Compliance. In addition, Rebecca is the leader of The Realtime IT Compliance Community where she posts to her IT Compliance weblog. You can contact Rebecca at: rebecca_herold@realtimepublishers.net.