Information Security procedure * UPDATED

[daishi5]

Originally posted by: Rilescat

Originally posted by: mechBgon

Originally posted by: Rilescat
--so.... now I have to consider my future with this organization.

When I first read the thread, that was my preferred solution There's a point at which you simply get into the lifeboat and let the Titanic go on without you.

Anyhow... two-factor authentication, perhaps?

...I hate to tell you, but we already use multi-factor systems. We have biometrics or password with a companion RFID Xyloc login system. The nurses use their fingerprints most of the time (because passwords are 'too hard') and have to have their RFID card present to stay logged in. Otherwise the system auto locks when they walk away. SOOOOO>.....of course, she left her card on the cart.

What then??? Seriously....the only thing I can do with a staff member that WANTS to give away their password and ID is to staple the damn RFID card to her face so she can't get it off.

Seriously....I am really thinking about it being time to head for a transfer.....

I work in a hospital as well, and your not alone. This is very common. The best you can do is say "I know the nurse was at the computer at the time of the login because her fingerprint was scanned, and I know her badge was at the computer the entire time." Past that, it is up to the users.

If your policies are not enforced, you may wish to consider moving quickly. I would not want to explain to future employers why a major security breach happened on my watch.