These are fairly weak recommendations ... and have been de rigour
forever. The problem isn't that we don't know how to keep trade secrets
safe: the problem is that, in the ordinary course of performing their
business function, employees require access to this type of information
and are therefore able to walk away with it. 

This isn't a matter of security policy enforcement (of course, there are
always idiots who have no security) but, rather, of trust in the
employee and of ease of copying. I'd also throw in there that the
overwhelming majority of systems do not track access to information and,
if they do so, the employees are not made aware that such access is
tracked. Without tracking and awareness, there is no deterrent, should
an employee feel tempted to misuse their privileges. 

The article mentions "monitoring" of employees prior to their leaving,
but this is inadequate: unless the systems have been put in place to
monitor, such monitoring will be ineffective. In addition, employees may
plan to leave many months in advance of giving notice, at which point
any implementation of monitoring will be pointless. 

-D 

---

-------------------------

DR. DAVID T. MACKNET
 MCP, MCSD, BA, MSc, MLitt, PhD

 email: [log in to unmask]
 Flickr: http://www.flickr.com/photos/wishiwerebaking/ [1]
 Blog: http://davimack.members.sonic.net/blog/ [2]
 LinkedIn: http://www.linkedin.com/in/davidmacknet [3]
 Stack Overflow: http://stackoverflow.com/users/6850/david-t-macknet [4]


Links:
------
[1] http://www.flickr.com/photos/wishiwerebaking/
[2] http://davimack.members.sonic.net/blog/
[3] http://www.linkedin.com/in/davidmacknet
[4] http://stackoverflow.com/users/6850/david-t-macknet

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]