That's what Bob McKee has done in response to the growing siege of intranets. McKee, director of information management security at The Hartford Insurance Co. in Hartford, Conn., and a 13-year veteran, has 26 people in his security organization. The 22 security managers and four disaster recovery and business contingency planning managers use a combination of education, accountability, common sense and good security products to safeguard the firm's data. When I started, security was much simpler. The introduction of intranets, Web browsers and Internet access has made security a 7 by 24 job.
Education starts with the employee's first day on the job.
Along with a booklet on benefits and corporate policies, employees are given handouts of company security policies governing computer usage, good security practices and all the no-no's. And for the past three years, The Hartford, in conjunction with the Computer Security Institute, has also published Frontline, a quarterly security publication distributed to all 25,000 worldwide employees. It contains articles on security issues, Internet threats and vulnerabilities, and hackers. The end result, McKee says, is heightened awareness. We realize people will be reluctant to rat out their employees and to report security violations.