IT Employment

Ask something
Discussion Locked

Temporary/Guest User Policy

0 helpful
7 replies

by pagogrp

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a situation where a client's IT department has refused me approval to log my notebook on to their network thereby severely restricting my ability to complete the work I have been hired to do.

Is anyone aware of a policy that I can present to these people that will ensure there network security/management issues are addressed & I can get the access I need??

7 replies

by timwalsh

I may be reading a little between the lines here. I see two possible situations: the IT department hired you for a specific purpose; or someone else hired you over the objections of the IT department. If the situation is the former, it may be recoverable. If it is the latter, you will probably be tearing your hair out before you are through.

If the IT department hired you, hopefully it will just be a matter of better explaining why you want access and addressing all of their security concerns. It could also be a matter of overcoming a perception that you should be able to the the work contracted for, without hooking up your computer to their network. Anything we can give you will either be very generic, or so specific that you can't use it. Find out what their specific objections are and address them all directly. If they want some sort of non-disclosure agreement (or whatever), let them draft it using the language that satisfies their needs.

If you were hired by someone else over the objections of the IT department, you may be out of luck. You are likely to be viewed as an intruder, and any roadblocks that can be thrown in your way, will be. You may have one trump card you can play ONCE. Depending on the positionheld by the person that hired you, you might go to that person and explain the situation and that you can't complete the work in the present climate. The IT department will have policy and the security trump card to play. If you are able to overcome the IT department's objections by going over their head, expect ZERO help from them - not a good way to conduct business - and it tends to get your reputation trashed.

Hope this helps.

by oldefar

See the article regarding making IT a partner in the business process rather than a cost center and an obstacle.

Hopefully your agreement with your client included their responsibilities such as reasonable access to systems and resources requiredto complete the work. If so, by all means be pleasant and open towards whatever is required, and if IT still blocks necessary access simply explain to your client the associated costs - more billed time, less accuracy, no validation, etc.

Thereis no sense in getting worked up about it. You will gain nothing and end up frustrated and stressed. I have seen multiple situations where policies failed to address realistic business requirements but IT control became the overriding factor. Letthose internal battles go on without your involvement.

by admin

First we would want to know exactly what access you needed and put you in (or create) the appropriate OU etc. This would be as much for your protection as ours. We would need to know exactly what you were needing to do. There would potentially be downsides for you though.

"Logging On To The Network" on our network means that you accept our group policy and allow your computer to be scanned and logged at all times. Yes, all your e-mail, passwords etc. will stay in our logs. You also automatically are forced to download our AV software and update it everytime you go on the internet. You will also be responsible for accepting all of our computer policies, including our software policy and show proof of licensure, appropriateness of programs installed on your laptop, and sign a statement to this end. This statement also states that all the data we collect from your laptop during work with us our property.

If you are not technically inclined, you could find it difficult to log on toother systems after gaining access on ours. For this reason, you may find it easier for us to give you a loaner machine while you are here. We will not provide support nor are we liable once you accept our agreement for any damages or restoration etc. outside our business. You will be asked to back up and save your data and install a clean os to start, although we don't check for this- you are responsible.

I hope this helps! :)

by oldefar

Your requirements are not necessarily unreasonable, but I see an issue that should be raised.

Company policies, like acts and laws, have 3 distinct aspects. First is the creation of the policy (legislation). This should identify the specific objectives being met and associated requirements in support of the objectives.

Second is interpretation of the policy. Consider this the judicial review against other policies as well as against meeting the intended objectives. Interpretation should include action taken against those who violate policy.

Third, there is enforcement. This is simply identification of policy violation, either as written or as later interpreted, stopping the violation, and reporting the violator to appropriate group for action.

Most problems with IT policy come from IT assuming all 3 roles. Policy should be defined by business leadership. Yes, input comes from various sources, but they determine the policy objectives and non-technical requirements.Perhaps the business units should be tasked with interpretation. IT should handle enforcement of the policy.

The gain for business occurs with situations like the initial posting. The company policy that is preventing the consultant from havingaccess has specific objectives and requirements. The business unit that brought in the consultant is tasked with interpreting how the company policy applies. IT enforces the policy and interpretation.

If IT feels an interpretation defeats the objectives of the policy, these objections and their recommended changes should go back to the policy makers for consideration.

by admin

at the request of the employees and although they do ask for advice on how to technically meet their objectives, the company directors, of which IT has about 6% representation actually decide whether or not to create the policy. All policies at any time can be over ridden by the CEO. We do not enforce policy at all in IT. This is done in our "Discipline Without Punishment" process (based on the book) through the appropriate supervisor, and then HR, and a peer review team in that order of escalation.

Our primary role in policy is to provide information and attempt to interpret and handle the flow and protection of information according to the needs of the various departments. At any rate, although we are part of creation, interpretation and enforcement, we actually do not do any of these alone, but act more as technical advisors of what is possible and what the associated expenses are.

:>

by admin

Perhaps I should of made more plain to the original poster that at my workplace these could all be overridden if needed etc. We definately make exceptions and have built in ways and easy record keeping forms for those wishing to do things outside our policy. In the initial conversation we would make every effort to understand their needs and find the appropriate situation for us and them. We do have room for changes, and our policy is a living document.
At the same time our comany has many interests that need protection and must balance these with the needs of the consultant somewhere between a login that gets a word processor and one with broad priviledges. Just saying "I need to login to your network" doesn't mean a lot to an admin IMO.Specific tasks that need done, well, that is something I would love to walk through with them and it will probably include a login. They need to understand though, that even if we let some policies slide, they need to respect our network and use it for the purposes intended. We used to have a very open network.
You wouldn't believe how it was abused, and the employees came to us and said we had to make it a decent working enviroment for them.

Anyway, I hope this adds perspective for the ?@ hand, and thank you Oldefar for your thought provoking answer :>

by oldefar

I have worked with many Fortune 1000 firms who lacked the common sense your company seems to have, Michael. Some of these no longer exist, others are now on the brink of failure, and IMHO their biggest wounds have been self inflicted. Policy for the sake of policy, process to the point of paralysis.

It must be great to work with such an enlightened group of managers and employees.

This discussion is closed to new replies.