Rou

So, let's say you were a manager at a company. One with lots of financial and personal information of it's cliental. As a manager you hire a contractor to fill a temporary void in your staffing. Call it a 3 month contract deal.

Now, your company has very strict rules about access restrictions, due to the information that is available.

As a manager, which of the following seems appropriate:
A: Follow the guidelines and file a request for access for the contractor. That process could take over a month.
B: Allow the contractor to use a terminal you log in and maintain careful supervision of him while he works.
C: Give your login information to the contractor to allow him to access what he wants at his whim.

If you answered C, don't be surprised when it comes back to haunt you. As it did recently in a case I had to deal with. You see, said contractor was arrested for a number of really serious while collar crimes associated with his previous employment. So now the happy manager is in the middle of a huge investigation that will result in his termination. That's already been decided, though I doubt he knows it.

So, lesson to the masses... those procedures, while often asinine and annoying, are generally there for a reason. Just a friendly piece of advice from your neighborhood guy that has to deal with this crap. I don't enjoy it when police need my testimony, k?