Nos últimos 11 anos, vivenciei diversos casos semelhantes ao artigo e posso afirmar que a grande maioria ignorava os controles para contornar alguma dificuldade ou erro. é muito importante que a TI tenha amplo conhecimento do negócio e dos processos operacionais.? Em uma situa??o como essa, ter uma conversa aberta e escuta ativa é crucial para entender quais os próximos passos a tomar.? O erro acontece somente com uma pessoa? Ocorreu por alguma dificuldade/erro sistêmico? O processo de seguran?a foi comunicado efetivamente? Essas respostas s?o essenciais para corrigir o problema: corre??o de um possível erro/dificuldade, melhoria na comunica??o ou mesmo uma demiss?o por comportamento indevido.

When an employee bypasses access controls, it’s a signal to re-evaluate both security and workflow. Start by discussing the incident with the employee to understand their motivations. Emphasize the risks this poses, not just to the company, but to the employee's role and the team's operations. Rather than focusing solely on punishment, explore if there's a gap in current processes that led to this. Strengthen security protocols, provide additional training, and streamline tasks so employees don't feel tempted to cut corners. Foster a culture where security and efficiency work hand in hand.

A key part of addressing this breach would be educating the employee on why bypassing access controls is a serious risk. I’d explain how such actions could compromise the organization’s security and potentially expose sensitive data. Implement mandatory security awareness training for all employees to prevent similar incidents. This training would focus on the importance of following protocols and the potential consequences of ignoring them

When an employee bypasses access controls, I act swiftly to assess the breach and understand its impact. I then reinforce security training, emphasizing the importance of following access protocols to maintain system integrity. To prevent future incidents, I implement additional safeguards and, if necessary, introduce penalties for non-compliance. This approach combines education with accountability, ensuring that security policies are respected and breaches are minimized moving forward.

Evaluate these security controls. There is usually a reason why people circumvent them. Of course, you can try to make them stricter and harder to bypass. Or you can go after the employee with disciplinary action. But in the end people want to get work done without being hindered by things they don’t understand. Work with them to make sure that on the one hand they understand the reason for security measures and on the other hand these measures integrate properly into business processes. Otherwise you are only treating symptoms.