|
By: JM Krikorian
 a reply to How Web 2.0, Facebook, and the Net Generation will change corporate securityby JM Krikorian on Jul 19, 2008 - 11:54 AM read 63 times Source: http://www.wikinomics.com/blog/?p=1728#comment-151977 |
|
Interesting post Brendan. I’m all for empowering individuals (be it within or outside of a company environment)but I also feel that leaving security solely to the individual is a huge risk for a corporation. In my opinion it should be a layered approach. That is, individuals can set their security settings based on whatever criteria they have and for whatever reasons but then there still needs to be some corporate validation of those settings to ensure governance and other policies are not compromised. For example, I can see a scenario where a healthcare professional wants to share a piece of information (for a valid reason) and sets security policies accordingly. However, because there might be patient information that is subject to HIPAA the company needs to make sure the employee-set security policies don’t violate HIPAA and put it (and the patient) at risk.
In addition to protecting oneself against governance and legal issues, there is also the need to protect IP. The above example involves an employee with good intentions, but what about an employee with malicious intentions?…
Featured
Author Profile
Moderator
Subscribe
Feed for nGenera Community:
Public
Secure
Why subscribe? What is RSS?