Security Basics mailing list archives

RE: Internet E-mail monitoring/approval - MONITORING


From: "Wajid" <wajid () cerrado co uk>
Date: Fri, 11 Apr 2003 07:51:55 +0100

Hi Greg, interesting point.

In drafting an AUP (acceptable user policy) for computer use, (for a
financial company) if I say....

=================
... The use of the technological facilities provided by Company is a
privilege NOT a right.

<snip, snip>

Although the Company respects the privacy of its users, privacy should not
be expected whilst using computers systems at the Company. Computers and
email facilities are provided to help the company achieve its mission and to
conduct its business efficiently. The Company reserves the right to monitor
any machine at any given time either for administrative purposes, or for
verifying the compliance of this agreement. This can be done without prior
consent of the user.
=================

Is it legal to say this? If the company forbids the use of its facilities
for personal use, shouldn't it have right to the content?

I have read some documents on privacy, but data such as logs of sites
visited, downloaded content; you come across that on maintenance anyway...
(router logs etc) isn't that classed as 'monitoring' ?

If the employee has signed to such a policy, should there still be a
problem? 

I have failed to see anything from the Information Commissions regarding
this, if anyone has any links, please let me know.

W

 



-----Original Message-----
From: Gregory.Kane () hood-ctsfmail army mil
[mailto:Gregory.Kane () hood-ctsfmail army mil] 
Sent: 10 April 2003 18:16
To: tfrederick () ascentek com; security-basics () securityfocus com
Subject: re: Internet E-mail monitoring/approval

Ted

The best answer is to get a good attorney and a court order for anywhere in
the United States, or lots of money for the law suit. The Privacy Act has
you on this one. Email is considered the same as personal snail mail and
cannot be opened without a court order and it must be from a federal court.

Greg Kane


Greg Kane M.S., GSEC, VAT
SAIC
CTSF-TD-IA
Assistant Information Assurance Manager
Trl- 4G
(254) 532-8321 X-2032
Cell 254-865-4934
gregory.kane () hood-ctsfmail army mil



-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free
technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------



-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------


Current thread: