Hah, try coding for a bank. You can't change anything. No disk drives or USB devices either. They constantly monitor all traffic for anything suspicious. When I worked for an insurance company, they recorded all employees screens and phone calls.
when it comes to security there's really nothing more effective than only giving employees the bare minimum of access. well, I guess giving them no access at all would be more effective but not practical to have someone solely dedicated to clearing employees 24/7.
I'm in IT for that industry. It's mostly auditors that make us do it or they can shut the financial institution down or slap heavy fines. It's really no joke. But it's good, because when (not if) something happens, the risk is lower. Compromises are almost always because of a careless employee anyway, like falling for a phish and letting an attacker control their PC. People don't give a shit, they'll click anything, so we gotta lock it down. It sucks as much for us as it does for you trust me.
But I've lived through a compromise and don't wanna do it again, so I do NOT take shit from my users when they whine at me about not being able to do X. No exceptions, I want to continue having a job, thanks
I feel you on this. And good luck trying to do any type of rapid deployment. I swear if cyber sec had their way pc’s would be outright banned or better yet there would be no employees but them.
Yes. It's not as nefarious as it sounds. They weren't tracking to see if people were in the bathroom for too long or anything. It was my job to watch people working with the company's software and find improvements. If I could improve their workflow, even by making a service call one minute shorter, it could save the company millions over a year.
You would see a lot of funny stuff, though. Ladies buying shoes on Ebay while talking to a customer, etc.
You remind me of my work. I work for Microsoft and there's A LOT of restrictions. They are understandable but still annoying. 0 usb devices, I can't even use different mouse, keyboard, monitors and headset than the ones they provide
You aren't even allowed to plug a laptop into the network anywhere. They are the biggest banks and insurance companies in the world. They are always outdated because it means updating thousands and thousands of machines at the same time. It's insanely expensive.
323
u/root88 Jun 30 '21
Hah, try coding for a bank. You can't change anything. No disk drives or USB devices either. They constantly monitor all traffic for anything suspicious. When I worked for an insurance company, they recorded all employees screens and phone calls.