Hi,
I work for a company(lets call us Company A). We have what I believe to be a secure setup.
There is another company(Company B) who has moved into one of our unused buildings. This building networked so any machine configured to access our domain can get onto the network. Company B is only there because a senior manager in my company is good friends with a senior manager in Company B so they came to some "mates agreement".
Part of this agreement is that Company B can access the internet through our network. I do not believe this to be a good idea as they need to go through some of our servers and we know nothing about the IT setup in Company B. My main concern is that this potentially leaves us exposed to some some sort of attack that we can not prepare for. Another issue is around who is responsible for providing supportin this arrangement. My thoughts are that my company takes priority over any issues Company B has but they will not be able to resolve all issues without our assistance.
It's also worth considering that we spend quite a lot of money to prevent people from accessing our network. I dont understant why we would then freely give access.
I'm also concerned about who is to blame if this goes ahead and there is a security breach. To be honest I know the blame will initially fall on me so if I get overruled I'll not do anyhing until I send an email to all senior management outlining my concerns and get somebody to confirm that this is their call and will ultimately shoulder any responsibiltiy. Not that this will make much difference but I think in times when I get overruled like this it's important to get somebody to provide written confirmation that they have been warned and accept there could be issues.
Does anybody have any thoughts, advice or previous experience they wish to share. In particular I would be keen to hear about anything I haven't thought about.
Cheers
Paul
Oh by the way, all they require is internet access. I have advised they get a separate broadband line installed.
I work for a company(lets call us Company A). We have what I believe to be a secure setup.
There is another company(Company B) who has moved into one of our unused buildings. This building networked so any machine configured to access our domain can get onto the network. Company B is only there because a senior manager in my company is good friends with a senior manager in Company B so they came to some "mates agreement".
Part of this agreement is that Company B can access the internet through our network. I do not believe this to be a good idea as they need to go through some of our servers and we know nothing about the IT setup in Company B. My main concern is that this potentially leaves us exposed to some some sort of attack that we can not prepare for. Another issue is around who is responsible for providing supportin this arrangement. My thoughts are that my company takes priority over any issues Company B has but they will not be able to resolve all issues without our assistance.
It's also worth considering that we spend quite a lot of money to prevent people from accessing our network. I dont understant why we would then freely give access.
I'm also concerned about who is to blame if this goes ahead and there is a security breach. To be honest I know the blame will initially fall on me so if I get overruled I'll not do anyhing until I send an email to all senior management outlining my concerns and get somebody to confirm that this is their call and will ultimately shoulder any responsibiltiy. Not that this will make much difference but I think in times when I get overruled like this it's important to get somebody to provide written confirmation that they have been warned and accept there could be issues.
Does anybody have any thoughts, advice or previous experience they wish to share. In particular I would be keen to hear about anything I haven't thought about.
Cheers
Paul
Oh by the way, all they require is internet access. I have advised they get a separate broadband line installed.