[LINK] Spying on staff no solution to privacy protection: professor

[Roger Clarke]

>http://www.computerworld.com.au/index.php/id;1622226737;fp;16;fpid;0
>Instead of spying on staff who snoop into private records while at work,
>organizations should adopt security measures that prevent staff breaching
>privacy laws, a Queensland University of Technology privacy expert said today.
>Professor Peter Croll, from QUT's Faculty of Information and Technology ...

Techniques for controlling inappropriate access were well-established 
three decades ago, and it's a sad reflection of the low quality of IT 
professionalism and management that they aren't already in place.

The following paper was invited by the organisers of the wrap-up 
conference following an ICAC investigation into abuses by employees 
of NSW DMR in *1992*:

'Practicalities of Keeping Confidential Information on a Database 
With Multiple Points of Access : Technological and Organisational 
Measures'
http://www.anu.edu.au/people/Roger.Clarke/DV/PaperICAC.html

See in particular:
-   Alternative Data Security Strategies and Measures
     http://www.anu.edu.au/people/Roger.Clarke/DV/PaperICAC.html#RTFToC13
-   Appendix: A Smørgåsbord of Technological and Organisational 
Measures To Reduce Unauthorised Access
     http://www.anu.edu.au/people/Roger.Clarke/DV/PaperICAC.html#RTFToC22

-- 
Roger Clarke                  http://www.anu.edu.au/people/Roger.Clarke/
			            
Xamax Consultancy Pty Ltd      78 Sidaway St, Chapman ACT 2611 AUSTRALIA
                    Tel: +61 2 6288 1472, and 6288 6916
mailto:Roger.Clarke at xamax.com.au                http://www.xamax.com.au/

Visiting Professor in Info Science & Eng  Australian National University
Visiting Professor in the eCommerce Program      University of Hong Kong
Visiting Professor in the Cyberspace Law & Policy Centre      Uni of NSW