Slashdot Mirror
Computer Competency Test For Non-IT Hires?
wto605 writes "As computers are used for more and more vital business functions, small businesses must have office employees who understand the dangers of, and how to recognize and avoid, malware, spam, and phishing. After having been stung by monthly virus cleanups (at $75 an hour) due to an otherwise competent office manager, my parents have realized they need to be aware of their employees' computer skills beyond the ability to type a letter in Microsoft Word (currently the closest thing they have to a test of computer competence). The problem is, as a small business, they have no IT expert who would be able to judge a potential employee's competency. I'm wondering if anyone knows of a good way to test these security/safety awareness skills, such as an online test, a set of questions, etc. I have already pointed them to Sonicwall's Spam and Phishing test, but it definitely does not cover all of the issues facing computer users."
It's illegal to dock employees' pay for damage to the employer's property.
For accidental damage, employees have no liability at all: It's considered the employer's responsibility to manage its workplace in a way that minimizes accidental damage, and any that does occur is considered a cost of doing business. Viruses routinely appearing on company machines, especially if it happens to many employees' machines, is probably in that category.
For damage done intentionally or through serious negligence, the employee may be responsible, but the employer still cannot dock their pay; they must sue the employee to recover the damages, and must prove by a preponderance of the evidence that the damage was inflicted intentionally or negligently.
10 PRINT CHR$(205.5+RND(1)); : GOTO 10
Basic training and locking down the PCs is the way to go.
Don't let the users run as administrators, and most of the infection problems will go away. From there, teach them how to deal with spam email and how to recognize fake antivirus and other phishing scams.
Once the users are kept from shooting themselves in the foot (restricted rights), and are taught why they shouldn't point the gun at their foot in the first place, things should improve dramatically.
It speaks volumes that your point of view is effectively, "I work better when I'm slightly less focused on my personal stuff". Has it occurred to you to try focusing on your work, when it's work time, and leave your personal issues at the door? I know this isn't a popular opinion around here, but your email, facebook and txt messages can wait until you aren't being paid for your time. If they can't, then you have a problem, and you should get counseling, OR you need to take a furlough from work and get your life in order.
While it's great that modern systems can keep us up to date on the latest and greatest events around us, it's nothing more than a distraction most of the time, and it is almost NEVER serious business.
The European Computer Driving License may be helpful here. See http://www.bcs.org/server.php?show=nav.5829 for a syllabus.