Go Back   Velocity Reviews > Newsgroups > Computer Security
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply

Computer Security - Automate written policy

 
Thread Tools Search this Thread
Old 12-24-2004, 02:05 AM   #1
Default Automate written policy


Any suggestions for automating the written computer use policy? I would
like to be able to have the users view the policy with a browser and sign
with some sort of digital signature. It would be nice if I can view the
history of when they last viewed it, etc.

I haven't had much luck finding a solution.




Eddy
  Reply With Quote
Old 12-24-2004, 08:18 PM   #2
Sasquatch
 
Posts: n/a
Default Re: Automate written policy
Seriously I would consider having a paper version which they can sign for
real and the copy can be placed in their employment record (201 File). If
it should ever come to a termination situation where a subsequent lawsuit
brought by the dismissed party was likely, a paper copy with their
handwritten signature is the best evidence you can provide.

Sasquatch
"Creature of Myth and Legend"

"Eddy" <drwishner(at)hotmail.com> wrote in message
news:mpOdnZ4m1voa5FbcRVn-...
> Any suggestions for automating the written computer use policy? I would
> like to be able to have the users view the policy with a browser and sign
> with some sort of digital signature. It would be nice if I can view the
> history of when they last viewed it, etc.
>
> I haven't had much luck finding a solution.
>
>





Sasquatch
  Reply With Quote
Old 12-25-2004, 12:08 AM   #3
donnie
 
Posts: n/a
Default Re: Automate written policy
On Thu, 23 Dec 2004 18:05:58 -0800, "Eddy" <drwishner(at)hotmail.com>
wrote:

>Any suggestions for automating the written computer use policy? I would
>like to be able to have the users view the policy with a browser and sign
>with some sort of digital signature. It would be nice if I can view the
>history of when they last viewed it, etc.
>
>I haven't had much luck finding a solution.
>

#######################
How about adding the use policy to a login script and pressing any key
to continue denotes agreement.
donnie



donnie
  Reply With Quote
Old 12-25-2004, 08:33 AM   #4
johns
 
Posts: n/a
Default Re: Automate written policy

> I haven't had much luck finding a solution.


Don't do it at all. Set up the computers so that they are only
capable of being used within the scope of your organization.
Personally, I still think that if a computer is left in a condition
that invites abuse, the time will come when it will be abused,
and the abuser will find himself in the hands of professionals
who know how to manipulate his psychology well enough
to lure him into rationalizing further abuse. It is a one way
street and habit forming in the extreme. Much easier to
simply set up the box so that can never happen. I do that
all the time, and it works. I use gpedit, a dummy proxy and
allow list in IE, and f-secure AV and firewall. Very easy.

johns




johns
  Reply With Quote
Old 12-30-2004, 05:43 AM   #5
Robert
 
Posts: n/a
Default Re: Automate written policy
On Thu, 30 Dec 2004 20:03:50 -0800, Eddy wrote:

> I actually do that now but when they click OK, they are acknowledging that
> they have read and agree to abide by the policy. But thats something I am
> overlooking. Clicking OK is probably just as valid as an electronic
> signature would be anyway. I'll have to think about that one.\


I would not place a bet on this if I were you. How many people really
read what is written before they click OK? Besides there is no electronic
signature by clicking OK. Clicking OK means nothing and you will lose
that fight in the end.


--

Regards
Robert

Smile... it increases your face value!



Robert
  Reply With Quote
Old 12-31-2004, 04:03 AM   #6
Eddy
 
Posts: n/a
Default Re: Automate written policy
I actually do that now but when they click OK, they are acknowledging that
they have read and agree to abide by the policy. But thats something I am
overlooking. Clicking OK is probably just as valid as an electronic
signature would be anyway. I'll have to think about that one.

Thanks
"donnie" <> wrote in message
news:...
> On Thu, 23 Dec 2004 18:05:58 -0800, "Eddy" <drwishner(at)hotmail.com>
> wrote:
>
>>Any suggestions for automating the written computer use policy? I would
>>like to be able to have the users view the policy with a browser and sign
>>with some sort of digital signature. It would be nice if I can view the
>>history of when they last viewed it, etc.
>>
>>I haven't had much luck finding a solution.
>>

> #######################
> How about adding the use policy to a login script and pressing any key
> to continue denotes agreement.
> donnie
>





Eddy
  Reply With Quote
Old 12-31-2004, 04:06 AM   #7
Eddy
 
Posts: n/a
Default Re: Automate written policy
Thats not bad but it has a limitation. I include pagers and cell phone use
in that policy. Basically stating that the equipment be used for work use.

"johns" <> wrote in message
news:cqj8k9$10t$...
>
>> I haven't had much luck finding a solution.

>
> Don't do it at all. Set up the computers so that they are only
> capable of being used within the scope of your organization.
> Personally, I still think that if a computer is left in a condition
> that invites abuse, the time will come when it will be abused,
> and the abuser will find himself in the hands of professionals
> who know how to manipulate his psychology well enough
> to lure him into rationalizing further abuse. It is a one way
> street and habit forming in the extreme. Much easier to
> simply set up the box so that can never happen. I do that
> all the time, and it works. I use gpedit, a dummy proxy and
> allow list in IE, and f-secure AV and firewall. Very easy.
>
> johns
>





Eddy
  Reply With Quote
Old 12-31-2004, 11:56 PM   #8
donnie
 
Posts: n/a
Default Re: Automate written policy
On Thu, 30 Dec 2004 20:03:50 -0800, "Eddy" <drwishner(at)hotmail.com>
wrote:

>I actually do that now but when they click OK, they are acknowledging that
>they have read and agree to abide by the policy. But thats something I am
>overlooking. Clicking OK is probably just as valid as an electronic
>signature would be anyway. I'll have to think about that one.

########################
Tell me something. How many users are involved and did you hire them?
I run a small w2k network , about 10 users and I really don't have to
worry about internal abuse. As the company grows and new users are
added, I feel that I can judge if the system is threatened internally.
If you're already dealing w/ 400 users, then that's another story. In
a case like that, I would have manangement send out a memo that has to
be signed and returned that it was read and understood.
donnie.


donnie
  Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Ctive Directory Password Policy Rishi Software 1 11-23-2006 04:49 AM
Re: BEWARE Blockbuster's new policy Nick Macpherson DVD Video 2 04-15-2005 06:51 AM
Flintstones DVD set of the first season is due for release, this month. Tom McCafferty DVD Video 12 12-27-2004 06:47 PM
What to look forward to on, Flintstones Season 2 DVD Tom McCafferty DVD Video 1 09-30-2004 08:27 AM
24 hour cancellation policy? techshare A+ Certification 0 09-07-2003 09:44 PM




SEO by vBSEO 3.3.2 ©2009, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46