IT Employment

General discussion

Locked

Manager trying to access inappropriate sites - teen forums / porn

By kcross ·
Hi guys,

Bit of a tricky situation here. One of our (ageing) managers is trying to access teen sites such as rate my body etc, he appears to have an acount set up on several teen forums (we reports from the websweeper when access is denied). The IT policy clearly states that internet access and email may be monitored so I am happy that the company is within their rights to discipline him. I have spoken to the HR Director who has asked me to monitor it for a while longer. BUT before we confront him is there anything else that we should consider?

Thanks

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

Surveillance

by techiemikee In reply to cooperation

With my experience, expertise and credentials it's going to be rather difficult for a defense attorney to dispute my ability to properly verify the person generating the inappropriate traffic is the same person that is logged in at that computer with the assigned username. There are no magical footprints(maybe in Hollywood) unless you've configured the computer to trace them, and if you configured the computer to trace actions, keystrokes, etc they would see every step you made while establishing non-repudiation. If you see a gun laying in a school yard and you pick it up and go straight to a payphone to call the police, later it is determine the handgun was used in a homicide and has your prints and the murderers, they are not going to throw out the gun as evidence simply because a citizen picked it up in the interest of public safety.

We're not collecting DNA evidence, it's more along the lines of Video Surveillance, just as video surveillance gathered by department store loss prevention or building security, holds up in court(even though the installer may not be law enforcement, or forensic experts) or as a person who is not an expert in physics can give eye witness testimony of a car crash, evidence gathered by private citizens is valid and admissible.

Collapse -

Not a question of dismissal

by noyoki In reply to cooperation

It's not a matter of the defense discrediting something as much as evidence being distroyed.

Sure, if a citizen picks up a gun and reports it, they may not be fingered in the crime, however their prints may cover the real bad guy's prints and then you've no evidence either for OR against him. The smarter course of action, however, would have been to ask another teacher to call the police while the first made sure it was not disturbed.

You can tell alot about a scene from the position of the gun relative to the body. Or the login information relative to the user, untampered with.

Collapse -

Check law in your area - Retain Solicitor/Barrister

by silversidhe In reply to A hypothetical situation. ...

You are in U.K. if I remember correctly? Protect yourself as I may have mentioned before predators are dangerous and vindictive. To keep others from reporting - you may be made an example of (and you seem kind of innocent to me). Prepare for the worst but hope for the best. Whoever mentioned hardcopies of everything - kudos - you definately need copies. Watch your back, predators are not all loners, others may back him by sticking it to yours.

Collapse -

Company Policies and User Agreements

by JD@OMG In reply to Manager trying to access ...

Hopefully, the organization you work for has documented policies and procedures for users to get accounts. Among them should be an Ethical Use agreement which the user has to sign.It's not iron clad, admittedly, but does give the organization some leg to stand on.

Also, your organization should have an IA department that should handle these policies and be the ones that request investigations into misuse once the "tech" stumlbles across it. I don't know about you, but my job is not investigation; only to provide documentation upon request from the IA department.

Had one instance where I noticed some odd web traffic and notified our IA. We tracked down where the user was located in our plant and our network lead followed the IA rep to the location. The man was in a meeting with all his division heads! He was seated in a corner of his office and only he could see his monitor. As the meeting was progressing, this idiot was surfing the web. I only wish I could have seen the look on his face when the IA rep barged into his office, and told him to back away from the computer, right now! *chuckle*

Unfortunately, we did not have the Ethical Use agreements in place at that time. The user was fairly high in our organization and had some political pull. Even then it was explained to him that he had the option to retire and should really take it before things got messy. He took that option.

Now that we have the Ethical Use agreements, it is our organization's policy for zero tolerance to this type of thing. And now our organization enforces that.

One other thing: If we do find a user that is visiting child porn sites, he is reported to the local authorities and Naval Investigative Services (NIS). Anybody that is stupid and sick enough to do that sort of thing at work deserves what he/she gets, imo.

Collapse -

Make SURE that it IS THE USER and not a bot/spyware/trojan

by rush2112 In reply to Manager trying to access ...

accessing those sites.

First.

Then once confirmed either way, proceed to
then REITERATE the policy to ALL employees in writing, an email with attachment of existing policy with a READ RECEIPT should show when everyone reads it.

Have everyone sign it(unless they already have)

Then speak to the user and get them to cease and desist.

Then proceed with disciplinary measures as policy dictates.

This is the best method.

If the user is a disciplanary problem, take appropriate security measures.

One other option is to MAC Filter this computer such that it can no longer access the internet.

Collapse -

Are you stupid or just want him warned?

by silversidhe In reply to Make SURE that it IS THE ...

Check the law for your area.

Collapse -

What's wrong with this picture

by The Bobinator In reply to Manager trying to access ...

Rate my body comes up on the front page of AOL when a user signs in (or at least it used to). This may be a forum for teen expression that's a little risque, but it is hardly porn (and definitely not illegal). I think this is being blown way out of proportion and I would question whether there are any ulterior motives to get the "aging manager" in trouble.

Collapse -

Concur

by jacksdaddy1 In reply to What's wrong with this pi ...

I totally agree with Mr. Bobinator and said much the same thing in my own missive of a few days ago, particularly when I sternly took to task those who wished to make it a police matter.

Collapse -

Forensic Professionals

by ruinandmurder In reply to Concur

Many of you have recommended taking a big step back and letting professional investigators handle the situation if that proves to be the companies choice of action. I think this is resonable advice but for idiots like me how do you find the names of organisations that are good at investigating this sort of thing?

Related Discussions

Related Forums