Beta
×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

How to Make your boss understand the role of IT

Anonymous Coward writes | more than 2 years ago

Security 3

An anonymous reader writes "I currently work for a small marketing firm that has hired me on to provide support for various things such as data tele's and networking. The problem being my boss has little concern over security and really a lack of knowledge for the need of any of it. what is the best way to bring him on board with the program (He is also in charge of the funding for new equipment and anything else needed)"

cancel ×

3 comments

Sorry! There are no comments related to the filter you selected.

You'r wasting your time (0)

Anonymous Coward | more than 2 years ago | (#39387725)

Really. get another job. Don't even bother - you cannot educate the stupid; it's a waste of time.

While you're there, i suggest to make your life as comfortable as possible - surf the web, read /., try to date the chick from administration, that kind of stuff.

If you really want to do some effort. Google, or search /., for simular topics, and amuse yourself reading it.

Just whatever you do, don't think it's a problem that _you_ can or should solve.

And no, i'm not trying to be sarcastic. If any, just pragmatic.

'The role of IT' or 'the need for change'? (1)

cjacobs001 (644842) | more than 2 years ago | (#39389383)

What I have seen is that either their lack of understanding of the need for security exists solely because they really have no idea (even that they have been operating under false assumptions that the 800 pound gorillas that they use in their daily work will some how 'save' them), or, it exists because they choose to ignore facts. -Some would say that ignoring facts could be thought of as a strategy for operations, but that's another conversation. When they have already chosen to ignore, logic is not going to convince them without a great big fight. So, in that scenario, as the first commenter here suggested: Walk away from the endeavor. But if it's that they really have no idea or are misinformed, in my experience, to be successful in getting buy-in for the need, I had to be ready to take the conversation through the entire scenario. --> Start by asking them how much they enjoy \ can afford risk. The answer is usually “not much.” This opens the path to a conversation about how much risk exists in \ for the organization, why and how\where it exists, and how risk can be mitigated by proper management of it, and the potential consequences of failure to do so. Of course, to have this conversation, you must be educated and convincing in your knowledge, and you must be able to point to relevant examples. --> identify a serious problem; demonstrate a 'fix'; and obtain buy-in to resolve it. --> THEN there are the initial costs to discuss concerning your proposals for the remedy \ mitigation efforts. Here, you must really be prepared AND understood by your audience, so your 'talk' has to be knowledgeable and practiced. You’ll most likely have to initialize a risk analysis for the organization, as well as a ROI analysis. You must also be able to convincingly convey the concept of 'increased risk with time', and speak to their desires for success and good reputation. If you want to be doing this; if you are passionate about the cause; if you are comfortable with 'the end justifies the means', then this is something you MAY be able to accomplish. But if you are not able to passionately talk about the issue and its causes and its costs and its fixes, you will be wasting your time, and, also, making it harder for the next person who attempts to get that buy-in.

Re:'The role of IT' or 'the need for change'? (1)

cjacobs001 (644842) | more than 2 years ago | (#39389407)

The issue is not going to go away, so, 'The role of IT' is not really the issue. The issue is really one about the culture of the business: IS business conducted in a manner with risks that could potentially cost, or is business conducted in a manner that deliberately minimizes those risks?
Check for New Comments
Slashdot Login

Need an Account?

Forgot your password?

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>