Security – How to Handle a Misbehaving User

Securityusers

What should I do about this user? The user is:

  • Downloading pornography
  • Attempting unauthorized access
  • Running hacking software
  • Sending unsolicited email
  • Installing software / tampering with the system
  • etc

This is intended as a generic answer for employee behavioral problems, a la Can you help me with my software licensing question?

I could see where acceptable use issues are a touch out of scope for SF, however it is one of those things most sysadmins will run into. I don't want to keep rewriting similar answers.

Best Answer

When it comes down to it most of us are just systems administrators.

We might be the ones to spot bad behavior and even sometimes called upon to help resolve situations. It is not our job to police or enforce employee behavior.

That being said having strong tools at your company’s disposal to address behavior issues as they come up is critical. Once a breach of policy occurs it is a HR question on how to deal with it. Provide them your documentation and let them do their thing. Wait to provide them whatever technical support is needed.

If you are in the situation that your company does not have an AUP or it needs revision this summary reflects a lot of research. It should provide you some guidance in getting started.

A good AUP should cover the following subjects.

  • One user per ID / Password - if someone uses your account you are liable.
  • One location for each password - don't use your work password outside.
  • Handling of personally identifiable / confidential data
  • Handling of media (CD, USB stick, etc)
  • What information can be transferred and to whom
  • Session locking - your screen locks so your account can't be misused.
  • Monitoring for email, file system utilization, web access
  • Personal use of business systems
  • Legal violations (copyright, hacking attempts, etc)
  • Attempts to bypass internal security controls
  • How violations are responded to - up to and including termination and legal action

EDIT - as DKNUCKLES points out it is necessary to follow the standard chain of command for these issues. Just because I was supposed to take them straight to the head of HR doesn't mean that is what your organization does.

Related Topic