Discussion Locked

File Access Control for Senior Managers

0 helpful
4 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I'm faced with a situation where a Manager is demanding full access to all data files on our system. Where can I find IT Governance documents discussing how to manage access for Managers and Senior Managers?

4 replies

by jamesrl

There isn't a template that every company uses, or even a standard. There may or may not be a company policy.

If no written policy exists, I would not provide such access without a more senior manager's approval. I know in one Fortune 100 company I worked for, it required a document signed by the CIO to approve any searches onto user secured data like email, share drive access or access to the PC. And the CIO wasn't going to allow this unless there was substantial evidence pointing to malfeasance.

James

by shepdog28

I can see how this would work for some of the more sensitive data on the system. My question failed to mention that my problem has to do with data on our ERP system. Getting approval from a Senior Manager is the direction I was thinking of. Your response confirms that I was starting down the right road!!

Thanks very much.

by charliespencer

is that all storage areas on the network are owned by someone - a project manager, a department head, the person who requested a storage area be created, etc. Our written policy says access to each area must be authorized by the person who owns it. The owner also determines the level of access (read only or modify).

This keeps IT out of the access fights. We don't do anything without the owner's authorization.

by shepdog28

This is how I manage access to functional areas of our ERP system and now realize that it would be the best way to manage the other data areas.

I appreciate your reply.

This discussion is closed to new replies.