.png)
Are you ready for the Christmas Party season to begin? Maybe it has already started for you, and you’re already wondering if you’re on Santa’s naughty list or not?!
Well, I hate to be THAT guy (but that’s my job)… I have to tell you at this time of year Information Security is even more important than it normally is.
We’ve seen it all…
Mobiles and Laptops lost or stolen
Clients being told how much money other clients are being charged(!)
Clients/employees being punched (or sexually harrassed)
System issues (due to ‘less than sober’ response to incidents!)
Oliver Twist is not a fairytale
Not wishing to be a kill-joy, but a few too many drinks at the office Christmas party could cost you more than your dignity!
Someone this Christmas will lose their laptop or mobile device while out celebrating at the Christmas party. Why?
People are invited out by suppliers or clients or will drop into the Christmas party when they have their laptop with them.
Laptop bags positioned under the table at busy bars are spied upon by thieves, and criminal gangs aren’t loveable ‘street urchins’ like they are in Oliver Twist. There are organised crime gangs (OCGs) who will target bars and distract people, while someone slips their bags from under the table, or takes the mobile phone from the table.
Remember: Smart phones, iPads and laptops are likely to contain our work contacts at the very least and, in some cases, may store even more confidential information. If you lose one of these devices it may become a reportable incident to the Information Commissioners Office (ICO), and certainly would need to be discussed with your clients.
Loose lips…
You’ve heard us say this before; Loose lips sink ships. Meaning that indiscreet conversations could land you in trouble.
“While on a Christmas party, we saw the head of sales make some very indiscreet comments to one of their biggest clients.”
I’ll leave you to fill in the gaps on what was said, but needless to say that it led to some very awkward conversations the next day.
We’ve also heard of employees talking to customers (at the Christmas party) about poor leadership, bad performance or poor products, and “If I was running this company I would …” and then promptly telling the customer the prices they were being charged were higher than other clients.
Again, it led to some very awkward conversations at the next customer briefing meeting.
Dance like EVERYONE is watching!
Making a fool of yourself on the dance floor will be the least of your worries if your phone or laptop is lost or stolen. Data falling into wrong hands could cost you your job; your employer their reputation or even, in the worst case scenario, their business.
Indiscreet conversations with (or about) clients are equally damaging, so here are my 10 seasonal security tips to keep you partying like it’s 1999! (some may need to Google that reference).
Phones, laptops and tablets all come with the facility to set a password – so use it.
Social media and alcohol don’t mix. Your posts may seem witty after a few glasses, but you may embarrass or even offend.
You may be keen to share photos of your festive fun on social media but colleagues who over indulged won’t thank you.
Lock your laptop in the office rather than take it out with you.
If you’re an employer consider the timing of your office party. Will staff work productively, and securely, with a hangover?
Is your office party being held in the office? If so, remind your employees about the need to clear desks, lock down computers and screens.
As an employer, introduce a clear desk concept and stick to it all year round. That way no one leaves confidential information or data lying around ….ever.
Don’t be tempted to access company data on the free wifi available at your Christmas party venue.
Think about your guest list – If you’re inviting Clients and suppliers, make sure everyone attending is aware that there some ‘VIPs’ in the room and be mindful of their behaviour.
Finally, if you’re a boss don’t leave IT and social media security until the festive season. Build cyber security and awareness into your culture and have policies in place, including guidance on social media use.
HR and Security: The Perfect Dance Partners
This is the time of year that the HR department (if you have one) needs to take to the dance floor with the Security team (figuratively speaking).
A lot of what has been discussed above can be handled prior to the party. Good, clear communication about acceptable behaviour is vitally important. What constitutes a disciplinary matter needs to be clearly understood by everyone and this is usually handled by your HR representative.
This is where HR and Security need to work together to ensure all risks are identified and covered off.
Of course communicating such messages is never fun, but that’s why Security and HR people are often called the ‘Fun Police’!
But don’t get us wrong… we love to have fun (well, most of us!), and you’ll certainly see me throwing some ‘shapes’ on the dance floor this Christmas (I am currently training for ‘Dad Dancing’ in the Olympics 2028).
However, your reputation is more important than a few hours of fun at the Christmas party.
As a wise woman once said to me…
“A Reputation is for life, and it can be destroyed at Christmas!”
What’s your Christmas Ghost Story?
We all have one.. If you’ve been to a Christmas Party you will most likely have a story to tell. Hopefully you’re not at the centre of the story, but if you are then you’ll know better than most just how damaging a lack of judgement can be.
This Christmas, make sure you plan your party with risk mitigation in mind – it might sound clinical and not much fun. But I promise you that it will lead to a much happier Christmas in the long run.