ICT Security in the Internal Regulations and Training of theEmployees
Vol.7,No.14(2016)
Abstract
Keywords:
Control of the Employee; Internal Regulations; Internal Instructions; Employees‘ Obligations; Internal Security; Training of the Employees
Pages:
s. 45–64
The target of this article is to present the proposal, progress and the results of the experiment, which aimed to find out how company employees respond to the situations that are defined within the internal security policy. In this context, we are focused from the beginning on the legal aspects to the general control of the employees using internal regulations and instructions from the employer to present related legal framework, which should be a necessary basis for effective compliance with internal regulations of the employer. We define the very concept of the internal regulations and its requirements (in contrast with internal instruction); then we present relevant decisions of the Czech courts. This should serve for better understanding of the mechanisms and instruments with which the employer can control its employees in the performance of their work. We will then put a general legal framework in the context with the results of the experiment. The purpose is thus to verify the hypothesis that although the law provides the requirements for the control of its employees, it is just a general framework (which is not a priori wrong), but in practice, it often leads to inadequate and vague regulation or the issue and it does not cover whole area. In practice, very important question connected to the implementation of the employee's instructions is how to present the information to the employees, who are required to behave in accordance with the security policy (as it is shown in our experiment) or generally in coherence with internal regulations and instructions of the employer. Such issue is not reflected in detail by the legal framework. The experiment took place in the branch of the company located in Brno, Czech Republic, which is focused on software development. The company has about 300 employees. One of the interesting findings was among the others that the training videos were inefficient for staff training, and vice versa there was visible positive effect or personal approach.
Control of the Employee; Internal Regulations; Internal Instructions; Employees‘ Obligations; Internal Security; Training of the Employees
s. 45–64
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Copyright © 2016 Pavel Loutocký, Kamil Malinka