Putting a Fair Internet Use Policy in Place

(page 2 of 2)

What can employers do?
Every organization should install basic anti-virus software, not only for their desktop computers but also programs that scan Web traffic. Your employee may be browsing a genuine Web site that has been hijacked and while there they could be downloading an unauthorized program without knowing it. If your Web traffic is being scanned, that unauthorized download would be detected.

Second, all your computers should be automatically updated with the latest software patches and security updates.

How important is employee education in this area?
Employee awareness is the weakest link. Most companies say, "Do not do this," but they don't explain why. So, the employees say, "I'm going to still do what I want to do."

If you explain to employees that they may receive e-mail that looks like it's a genuine message from their bank, and explain what the repercussions of clicking on that link is, then they're far more likely to follow the policy.

Some companies don't allow Internet access at work and others don't set a policy at all. Is it difficult to strike the proper balance?
Yes. If you're draconian and you shut off everything, you wind up with disgruntled employees who could get very angry and harm your organization. You want to be fair and allow people to use the Internet to check their e-mail or update their social networks before work or on their breaks. As long as you pay attention to what is going on and help your employees do their work better, that's the balance.

What's the best way to inform employees about the policy?
Employers should develop an acceptable-use policy that the employee signs when they join the organization. Let them know in detail what they can do online, and what is a no-go. Inform them that the company has a policy to monitor all Internet activity for security purposes and to make sure that employee's actions don't cause harm to the employees or the organization.

But employers should not let it drop after that. Continue to promote ongoing awareness in newsletters and periodic workshops, identifying the most recent security threats and how individuals are being targeted. Do that and your employees will be aware and educated on this subject.

Your firm sells online monitoring software that tracks what employees do online. Is there a deterrent factor for employees, just knowing they're being monitored?
Not really. For instance, we have Internet monitoring but it's not something that I think of when I come in and check a Web site. Those doing their jobs and checking a couple of Web sites for five or 10 minutes every now and then are no problem. The people who have reason to fear are those who are wasting an hour or more on cybershopping or downloading games. The software issues usage reports that allow the company to identify slackers and limit their Internet access.

What should be done along with limiting or restricting those employees' Internet access?
They have to be told off in a proper manner, so they understand that if they don't toe the line and follow company policy, steps can be taken against them. Using monitoring software is also very, very important in the event that the employee needs to be dismissed for illegal or inappropriate Internet browsing. If your company has told them they can't do this and you have a report showing they've violated the policy, your HR department has a very strong hand if it needs to take legal action or dismiss them.

Karen E. Klein is a Los Angeles-based writer who covers entrepreneurship and small-business issues.

Business Exchange

Track and share business topics across the Web.