Personnel Today
  • Home
    • All PT content
  • Email sign-up
  • Topics
    • HR Practice
    • Employee relations
    • Learning & training
    • Pay & benefits
    • Wellbeing
    • Recruitment & retention
    • HR strategy
    • HR Tech
    • The HR profession
    • Global
    • All HR topics
  • Legal
    • Case law
    • Commentary
    • Flexible working
    • Legal timetable
    • Maternity & paternity
    • Shared parental leave
    • Redundancy
    • TUPE
    • Disciplinary and grievances
    • Employer’s guides
  • AWARDS
    • Personnel Today Awards
    • The RAD Awards
  • Jobs
    • Find a job
    • Jobs by email
    • Careers advice
    • Post a job
  • Brightmine
    • Learn more
    • Products
    • Free trial
    • Request a quote
  • Webinars
  • Advertise
  • OHW+

Personnel Today

Register
Log in
Personnel Today
  • Home
    • All PT content
  • Email sign-up
  • Topics
    • HR Practice
    • Employee relations
    • Learning & training
    • Pay & benefits
    • Wellbeing
    • Recruitment & retention
    • HR strategy
    • HR Tech
    • The HR profession
    • Global
    • All HR topics
  • Legal
    • Case law
    • Commentary
    • Flexible working
    • Legal timetable
    • Maternity & paternity
    • Shared parental leave
    • Redundancy
    • TUPE
    • Disciplinary and grievances
    • Employer’s guides
  • AWARDS
    • Personnel Today Awards
    • The RAD Awards
  • Jobs
    • Find a job
    • Jobs by email
    • Careers advice
    • Post a job
  • Brightmine
    • Learn more
    • Products
    • Free trial
    • Request a quote
  • Webinars
  • Advertise
  • OHW+

HR TechnologyOnboarding

How HR can support IT with information security

by Cath Everett 6 Nov 2015
by Cath Everett 6 Nov 2015

Typically data security is the realm of the IT department, but HR can make a huge difference to protecting vital corporate data with the right procedures in place, discovers Cath Everett. 

You might not consider that the average HR professional would have a major role to play in protecting an organisation’s information security activities.

But according to Alan Ryan, director of security practice at security consultancy MTI, HR can make a world of difference simply by creating “open, two-way communications channels” with IT in order to help identify and manage risk.

Key areas in which such risks are highest relate to the processes and procedures involved when employees either join or leave the company, particularly if they depart under a cloud or are made redundant and so might have an axe to grind.

“There need to be strong leavers procedures in place so that IT is made aware when someone has gone and can remove their system access privileges,” warns Ryan. “The issue is that, if leavers are still able to access corporate systems remotely, they can prove to be high risk.”

Position of least trust

Another challenge is dealing with people who are new to the organisation. The problem is that many employers simply assign new joiners the same system access rights as their colleagues without really thinking about whether or not they require them.

“In order to reduce risk, you should take the position of least trust,” says Ryan. “So only give people as much access as they need to do the job and don’t just give them remote access just because others in the department have it.”

To make the process consistent and repeatable, access rights should ideally be assigned to individuals based on their specific job description – something that HR, line managers and IT would all benefit from working on together.

As a result, if someone is demoted, promoted or moved sideways, their access rights would change based on their new job description and in line with their working requirements – rather than simply just keeping everything intact because it has always been that way.

Sign up to our weekly round-up of HR news and guidance

Receive the Personnel Today Direct e-newsletter every Wednesday

OptOut
This field is for validation purposes and should be left unchanged.

“Most companies make changes after something’s happened, but really prevention is better than cure in terms of risk mitigation,” Ryan says.

“A common, open communications channel between HR and IT would help to identify lots of risk areas and would certainly be more cost-effective than having lots of systems going down.”

Cath Everett

Cath has been a journalist and editor for more than 20 years, specialising in HR and technology issues.

previous post
BBC spent close to £500,000 fighting unfair dismissal claim
next post
Egypt: Employment rights for staff stranded in Sharm el-Sheikh

You may also like

CIPD appoints expert in AI to boost support...

8 May 2025

Preparing for a new era of workforce planning...

8 May 2025

M&S pauses hiring as it deals with cyber...

2 May 2025

Quarter of employees worried AI will threaten jobs...

28 Apr 2025

Google concerned by slow AI take-up in UK

25 Apr 2025

HR teams build AI use but seek more...

14 Apr 2025

Redefining employee relations for the future of work...

27 Mar 2025

The future of work: is the UK workforce...

11 Mar 2025

What does the TV show Severance tell us...

14 Feb 2025

Benify and Benefex merge to become Benifex

12 Feb 2025

  • 2025 Employee Communications Report PROMOTED | HR and leadership...Read more
  • The Majority of Employees Have Their Eyes on Their Next Move PROMOTED | A staggering 65%...Read more
  • Prioritising performance management: Strategies for success (webinar) WEBINAR | In today’s fast-paced...Read more
  • Self-Leadership: The Key to Successful Organisations PROMOTED | Eletive is helping businesses...Read more
  • Retaining Female Talent: Four Ways to Reduce Workplace Drop Out PROMOTED | International Women’s Day...Read more

Personnel Today Jobs
 

Search Jobs

PERSONNEL TODAY

About us
Contact us
Browse all HR topics
Email newsletters
Content feeds
Cookies policy
Privacy policy
Terms and conditions

JOBS

Personnel Today Jobs
Post a job
Why advertise with us?

EVENTS & PRODUCTS

The Personnel Today Awards
The RAD Awards
Employee Benefits
Forum for Expatriate Management
OHW+
Whatmedia

ADVERTISING & PR

Advertising opportunities
Features list 2025

  • Facebook
  • Twitter
  • Instagram
  • Linkedin


© 2011 - 2025 DVV Media International Ltd

Personnel Today
  • Home
    • All PT content
  • Email sign-up
  • Topics
    • HR Practice
    • Employee relations
    • Learning & training
    • Pay & benefits
    • Wellbeing
    • Recruitment & retention
    • HR strategy
    • HR Tech
    • The HR profession
    • Global
    • All HR topics
  • Legal
    • Case law
    • Commentary
    • Flexible working
    • Legal timetable
    • Maternity & paternity
    • Shared parental leave
    • Redundancy
    • TUPE
    • Disciplinary and grievances
    • Employer’s guides
  • AWARDS
    • Personnel Today Awards
    • The RAD Awards
  • Jobs
    • Find a job
    • Jobs by email
    • Careers advice
    • Post a job
  • Brightmine
    • Learn more
    • Products
    • Free trial
    • Request a quote
  • Webinars
  • Advertise
  • OHW+