This morning, I was again reminded, that sadly we do not take security serious enough in the business.
4 Most Striking Daily examples are (just this morning!)
1) SKYPE Chats: Skype is NOT an Lazada tool, so if you have a Skype group and there are still ex-Lazadians on it, they still have access to ALL our daily conversations and files/gDocs shared via Skype.
2) Email Groups: Email Groups have to be regularly checked and revisited. Many of the Email groups are way to big. a) I don’t know about you, but I get enough emails as it is. So if people don’t need to be on emails lists, pls take them off b) if the email lists are too big, you have no control over the spread of the email
3) Conference Calls: Regularly check who the participants are on conference calls, refresh the participants list and Most importantly, regularly get new dial-ins
4) Print out on Desks: All of you have way to many confidential paper lying on your desks. Te remind everyone: we have a clean desk policy. that means that desks are clear. no paper, no trash.
Our information and data is what we have worked for the last 3.5 years. I have little interest in just making it openly available. The easiest way to protect our data, is to just manage simple methods to prevent it.
I have asked all CEOs to be very strict with staff, who ignore the above. Continuous ignoring of such important policy will be reflected in end-of-year reviews.
I am not doing this to be difficult, but because I expect everyone to be disciplined with such important matters. In CC is Fabrice. To remind everyone, he is our HEAD of SECURITY. If you get an email from him or the IT security Team, asking you to do something, pls treat it as important as if I send this email. always. There are no short cuts with security.
Have a great week.