One stormy day …

Most large organizations have strict controls on Internet access, using proxy servers, filters and monitoring software. This can represent a large overhead in capital and support costs. Accordingly most small organizations don’t bother.

Several clients have asked about controlling Internet access to prevent wasted time. Most recognize the inevitability of employee use of the office Internet for personal use such as checking private Email, doing a little research, etc. The concern is more for the employee that goes surfing and gets lost. Add to that, the fact that wide open surfing is a major cause of spyware events.

The first step is to set an expectation level, and then document it. Create a policy statement for the association policy and procedure manual. State clearly that the office computers and network is for business purposes. Characterize association data and information as priviledged and the property of the association. Define your limits on PC and Internet for personal use. If it’s not allowed, then say so. If it’s ok on a very limited basis, then say so, and warn the employee that excessive use is forbidden and could result in sanctions. Personal use can be restricted to break and lunch time, or you can say that it would be preferred. Take a position on playing games on the computer: not allowed, allowed during lunch hour, or allowed when idle. If you have to caution an employee about inapropriate use, then document this warning.

If you find that too much time is spent at innapropriate Internet sites and it’s not easy for you to monitor, consider installing a software filter to do the job. We found one, FilteGate, that is very effective, quite reasonable in cost, and doesn’t require a lot of administration. Once the software filter is in place, then the controls become part of the process, rather than a supervision chore.

Software and services that I use and can recommend . . .: Internet access filters - can you limit surfing activity?