Get your manager's view in writing. #1 -- If he's fine with convergence of liability, then great. #3 -- Speak to legal #4 -- Security requires defense in depth. Deliberately eliminating one layer of protection does not lend itself to security. I hope that your customers are either consumers or enterprises which don't care about security, or this will come back to bite the organization sooner rather than later. Get your manager's view in writing. (Repeated for emphasis) Regards,
ASB http://XeeMe.com/AndrewBaker Providing Expert Technology Consulting Services for the SMB market… GPG:860D 40A1 4DA5 3AE1 B052 8F9F 07A1 F9D6 A549 8842 On Wed, Dec 7, 2016 11:24 PM, Kish N Kepi [email protected] wrote: We keep a lax environment – our users are local admins on their Windows laptops and we not stop them from installing any software they want – the only caveat I ever say is ‘don’t be stupid’. And yes, we are a hi-tech house, well beyond the startup stage. During a conversation about potential changes to the way we do backups today, I stated that the current back up routine specifically excludes most media files, and also that I’d used psexec to kill utorrent processes. My boss, who is actually quite knowledgeable in IT matters, had a response surprised me: why? Why not backup the media files? Why not allow torrent traffic? His points were as follows: 1. We give them laptops and smartphones and expect them to be available at all hours of the day – that’s convergence of home and office life – why shouldn’t we backup the photos of their kids, pets and vacations too? 2. Do we have bandwidth issues? We have a broad link to the internet and only at periodic peaks do we hit anywhere near our limit 3. Legality of torrents? Really? How many people care about the legality? 4. Malware? We have other protections in place. I couldn’t come up with any answers that sounded reasonable to me, so at this stage, we’re planning increase our backup storage capacity. Does anyone here have answers that I lack? Sorry for cross-posting, but I this question is bothering me, and I know that many people in this for a have strong, well-formed (and well-expressed) opinions Kish n Kepi
