| As a marketer of anti-pornography software, I have
developed what I am calling the Ostrich Test. If the statements
that comprise the Ostrich Test sound familiar, it is likely that
your organisation - just like the great African bird – is burying
its head in the sand when it comes to pornography in the workplace.
1) Our staff would never do such a thing!
Oh dear – get real! Unfortunately they are already doing it - to
a greater or lesser extent, depending on your corporate culture.
In this category, the Ostrich award goes to the security officer
of a larger organisation, dominated by young males, who “trusts
their staff members to be mature adults” and does not monitor Internet
or email activity.
2) We have an appropriate use policy that our staff abide
by!
Do they? When was the last time your employees and contractors
were asked to review the appropriate use policy? Was it when they
joined 10 years ago? Case law demonstrates that unless your staff
are asked to acknowledge the existence of such a policy frequently
(e.g. annually), then disciplinary action based on such a policy
may not be enforceable.
3) Our policy is linked to legislation.
Appropriate use policies are often linked to technology – i.e.
“Internet and Email appropriate use” – which automatically exempts
staff using other technology, e.g. when viewing X-rated DVDs or
still images on USB devices. Also, legislation may allow legal but
“undesirable” images into the organisation – such as calendar boys
and girls. It also pays to remember that pornography at the workplace
is a serious issue even when the material in question is not illegal
itself.
4) It’s the IT department’s job to enforce appropriate
use policies!
“No, it’s not, its HR’s job.” - “No no, it’s part of Security.”
– Pass the parcel …
Responsibility for managing undesirable content in an organisation
is often unclear – resulting in a lot of finger pointing when things
go wrong.
5) We have internet controls – we are covered!
Yeah right! Border management controls may work where there is
a clear border, but most networks are now rather permeable. There
are many roads leading to Rome, and the ways via which pornography
finds its way into your organisation’s network are manifold: the
Internet, CD/DVD’s, USB, Cameras or other devices, or maybe the
firm laptop occasionally uses other networks which don’t have border
controls at all – like the one at home. The only effective control
is one that covers the desktops themselves, regardless of source.
6) Auditing for pornography is too difficult!
Forget that excuse – provide yourself with the right software!
PixAlert Auditor allows you to audit your entire organisation using
a user friendly “point and click” user interface for selecting targets,
reviewing results and producing reports.
7) The audit has no value if it does not turn up anything
really big!
To the contrary: The real payoff for your organisation is that
regular audits provide positive assurance to management and senior
executives about the safety of your network and the integrity of
your staff. Regular and well-known audits act as a deterrent to
staff. However, in the event of a decidedly serious pornography
find, audit documentation supports the process of disciplinary action
being taken against a staff member.
Have you passed the Ostrich Test? If so congratulations on protecting
your business from threats such as loss of reputation, possible
sexual harassment or sexual discrimination claims, and even prosecution
for enabling the trafficking of illegal images. If not, get your
head out of the sand and review your management of undesirable images
in the workplace, before it is too late
|