Agreed with Ken Ho's comments on the NDA (Non-Disclosure Agreement) or Ethical Policy. You may include/insert the terms (in more detail) in the "Exit Interview Agreement." It's not 100% guaranteed to prevent data leakage, but at least we've tried our best to avoid the possibilities. :icon1:
This is a universal problem that has no easily implementable solution. You cannot restrict access to CD writers, USB drives, etc., as most employees need those functions for their day-to-day work. If your organization has sensitive data, which might include customer lists, new software development, other "trade secrets," etc., then you must ensure that every single employee in the organization signs a non-disclosure agreement, preferably at the time they are hired, and it is included in all the other paperwork processed when they commence duties. Staff also need regular reminders about respecting confidentiality and privacy rules. If you employ staff whose duties include producing written materials, developing software, research, etc., then you need to make sure they sign agreements stating that any work they do for the company solely belongs to the company, and they relinquish all ownership of the materials or inventions, etc. Finally, at the exit interview, you remind staff of their obligations regarding confidential company materials and that the company will have no hesitation in taking legal action in the future to protect its property.
John in Oz
From Australia, Melbourne
John in Oz
From Australia, Melbourne
Dear Friends,
I want to create a Payroll Software in Excel. If this is possible, please send me different types of formats such as Loan, Advance, Tour Notice, Tour Reports, and many other formats.
Thank you,
Sunil P.
From India, Ahmadabad
I want to create a Payroll Software in Excel. If this is possible, please send me different types of formats such as Loan, Advance, Tour Notice, Tour Reports, and many other formats.
Thank you,
Sunil P.
From India, Ahmadabad
Hi,
For your query, Mr. Sayed has provided a partial solution. In today's situation, this problem is common across almost all types of industries. To overcome this issue or reduce the risk of security breaches, there is an international standard available known as ISO 27001:2005. If possible, obtain the standard and review it. For any further queries, feel free to contact me at +91 9881068608 or via email at [imcpune@gmail.com](mailto:imcpune@gmail.com).
From India, Pune
For your query, Mr. Sayed has provided a partial solution. In today's situation, this problem is common across almost all types of industries. To overcome this issue or reduce the risk of security breaches, there is an international standard available known as ISO 27001:2005. If possible, obtain the standard and review it. For any further queries, feel free to contact me at +91 9881068608 or via email at [imcpune@gmail.com](mailto:imcpune@gmail.com).
From India, Pune
Hi,
Please ensure that all systems in your organization do not have the facility to copy to any pen drive or CD. If anyone needs to copy data, they must obtain permission from their boss, and the IT team can assist in copying the data from the system.
Regards,
Kiran Reddy
From India, Delhi
Please ensure that all systems in your organization do not have the facility to copy to any pen drive or CD. If anyone needs to copy data, they must obtain permission from their boss, and the IT team can assist in copying the data from the system.
Regards,
Kiran Reddy
From India, Delhi
Shilpa, sorry if I am repeating any of the points already made. If the data leak risk is really valuable, nothing beats effective monitoring by IT professionals on the traffic flow, especially tracking the exit guy's usage in the past 15 days or so. However, nothing works as effectively as vigilance from the next 1-2 levels of management. That's the key.
In our organization, we follow a practice of disabling drives and have a strict policy of need-to-know basis. Implementing a single login ID for all systems will facilitate easy monitoring.
In our organization, we follow a practice of disabling drives and have a strict policy of need-to-know basis. Implementing a single login ID for all systems will facilitate easy monitoring.
Dear Shilpi,
It is not practically possible to stop these things, but you should ensure that all the data from your office is kept in a system, organized under different folders. Instruct all other staff members to remove the data immediately after completing their work. It is important to trust your employees, counsel them, and build their confidence. This is the only solution.
Goodbye and take care.
From India, Delhi
It is not practically possible to stop these things, but you should ensure that all the data from your office is kept in a system, organized under different folders. Instruct all other staff members to remove the data immediately after completing their work. It is important to trust your employees, counsel them, and build their confidence. This is the only solution.
Goodbye and take care.
From India, Delhi
Dear All,
I am a permanent resident of Manjunathnagar, Bangalore, and my family consists of 5 members. As per the Rules and Regulations mentioned in the Ration Card/Fair Price Shop, it states that we are entitled to receive 2 LPG Gas (Indane) cylinders per month. However, our Gas agent in Rajajinagar I block consistently delays delivery and only provides one Gas Cylinder per month. Our delivery record, which is signed, confirms that to date, we have only received one Gas Cylinder per month despite continuous telecalls, requests, and follow-ups. Additionally, he does not permit cancellation or transfer to our nearest agent. Can anyone help me resolve this issue?
Regards,
Gajendran
9845184701
From India, Bangalore
I am a permanent resident of Manjunathnagar, Bangalore, and my family consists of 5 members. As per the Rules and Regulations mentioned in the Ration Card/Fair Price Shop, it states that we are entitled to receive 2 LPG Gas (Indane) cylinders per month. However, our Gas agent in Rajajinagar I block consistently delays delivery and only provides one Gas Cylinder per month. Our delivery record, which is signed, confirms that to date, we have only received one Gas Cylinder per month despite continuous telecalls, requests, and follow-ups. Additionally, he does not permit cancellation or transfer to our nearest agent. Can anyone help me resolve this issue?
Regards,
Gajendran
9845184701
From India, Bangalore
So finally, I think with all your replies, it seems that no very effective solution is available. Either we can go for disabling using drives/common systems on which IT keeps an eye, or getting an NDA agreement signed. Thanks for your cooperation. If you come across any other solutions, I request you to share.
Thanks,
Shilpi
From India, New Delhi
Thanks,
Shilpi
From India, New Delhi
It depends on how you categorize. If you have a good IT team, you can restrict the access according to position and designation. Locking USBs, CD-ROMs, restricting the use of pen drives, or accessing personal email on the internet is not a solution. This will make employees feel insecure and lack confidence in the company/management.
It's basically a trust bond and how management makes employees feel comfortable. Also, giving employees an opportunity to share their views on the subject openly or through a common email ID that can be used as a suggestion box.
BABUDADA
From India, Mumbai
It's basically a trust bond and how management makes employees feel comfortable. Also, giving employees an opportunity to share their views on the subject openly or through a common email ID that can be used as a suggestion box.
BABUDADA
From India, Mumbai
Looking for something specific? - Join & Be Part Of Our Community and get connected with the right people who can help. Our AI-powered platform provides real-time fact-checking, peer-reviewed insights, and a vast historical knowledge base to support your search.