internet usage monitoring
Discussion
Hi I wonder if the might of PH can help here.
We're having to re-write our corporate internet usage policy. Based on a recent problem with a now ex-member of staff and advice from our HR buddies we are having a problem regarding monitoring of staff's usage:
1) You can’t pinpoint an individual and “investigate” them without telling them first that you’re doing so.
2) So you’d have to have a valid reason (i.e. one that would stand up in a tribunal) to investigate. Ipso facto spot checks are out.
3) One couldn’t, I think, identify an individual and retrospectively look at the previous month’s activity, because its not just a case of informing an individual, again a valid reason is needed.
4) All covert monitoring is forbidden by law. It seems to me that the situation is that you can apply general monitoring but anything more requires a) informing the individual concerned and b) having a valid reason for doing more.
Hence, I’ve put in this statement "which relies on the software flagging inappropriate use to give us the valid reason for an investigation, if needed."
But the big question is does the software work this way (SessionWall) and is this really what everyone else is doing or do they rely on spot checks.
Any advice would be most welcome.
(BTW any solution must not be able to block access to PH
)
We're having to re-write our corporate internet usage policy. Based on a recent problem with a now ex-member of staff and advice from our HR buddies we are having a problem regarding monitoring of staff's usage:
1) You can’t pinpoint an individual and “investigate” them without telling them first that you’re doing so.
2) So you’d have to have a valid reason (i.e. one that would stand up in a tribunal) to investigate. Ipso facto spot checks are out.
3) One couldn’t, I think, identify an individual and retrospectively look at the previous month’s activity, because its not just a case of informing an individual, again a valid reason is needed.
4) All covert monitoring is forbidden by law. It seems to me that the situation is that you can apply general monitoring but anything more requires a) informing the individual concerned and b) having a valid reason for doing more.
Hence, I’ve put in this statement "which relies on the software flagging inappropriate use to give us the valid reason for an investigation, if needed."
But the big question is does the software work this way (SessionWall) and is this really what everyone else is doing or do they rely on spot checks.
Any advice would be most welcome.
(BTW any solution must not be able to block access to PH
)If you are using ISA then you can monitor all websites visited along with blocking certain ones too.
All you have to do is stipulate within a contract between the IT Department and all of the other departments that all web access and email access will be monitored for non-business use activity. That way you can look at anyones activity at anytime without their permission
All you have to do is stipulate within a contract between the IT Department and all of the other departments that all web access and email access will be monitored for non-business use activity. That way you can look at anyones activity at anytime without their permission
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff