Security mindsets of very small businesses and residential clients

JaredBusch

Also if O365 is much more secure, I am going to be pushing it a lot more.

Any exchange server can have opportunistic TLS enabled, just have to do it. If you use Postini/Google Apps, it is not turned on there by default, but is very easy to turn on.

alexntg

@Carnival-Boy said:

@scottalanmiller said:

I've written a bit on the evils of SMS.

Link? I definitely don't understand the risks.

Another problem I have with using e-mail for confidential communication is the annoying habit of some users to set-up rules to forward all of their work e-mail to their personal e-mail. That's usually their personal Hotmail e-mail that uses the password "password".

That's one of the many reasons that it's important for companies to have and enforce policies that prohibit employees from using their personal email for work purposes.

Carnival Boy

How do you enforce something like that?

JaredBusch

@Carnival-Boy said:

How do you enforce something like that?

You make it policy. If they are caught, then you discipline them per the policy.

Carnival Boy

@JaredBusch said:

. If they are caught, then you discipline them per the policy.

That's HR's function, I try not to get involved.

just say no to residential clients there are a bagillion folks round here (college town) doing laptop repair for right next to nothing. little yard signs up everywhere. heck just say no to some tiny companies too

JaredBusch

@Carnival-Boy said:

@JaredBusch said:

. If they are caught, then you discipline them per the policy.>

That's HR's function, I try not to get involved.

See you answered your own question then. You let HR enforce it.

Carnival Boy

I was thinking more about controlling rules in Exchange. If HR need to be involved to get something enforced then I may as well forget it.

scottalanmiller

@alexntg said:

@Carnival-Boy said:

@scottalanmiller said:

I've written a bit on the evils of SMS.

Link? I definitely don't understand the risks.

Another problem I have with using e-mail for confidential communication is the annoying habit of some users to set-up rules to forward all of their work e-mail to their personal e-mail. That's usually their personal Hotmail e-mail that uses the password "password".

That's one of the many reasons that it's important for companies to have and enforce policies that prohibit employees from using their personal email for work purposes.

Sure. But you'd want similar policies to keep them from using SMS too. If one is okay, the other might as well be.

scottalanmiller

@Carnival-Boy said:

How do you enforce something like that?

HR. It's not for IT to do.

scottalanmiller

@Carnival-Boy said:

I was thinking more about controlling rules in Exchange. If HR need to be involved to get something enforced then I may as well forget it.

Then why the concern? If management and HR think it doesn't matter then it should definitely not concern you. Not IT's place to make those kinds if calls.