Managing Risk as an IT Security Manager

Managing Risk as an IT Security Manager

Question 1

As a manager, one should have the appropriate skills to run an organization effectively. The manager is an individual with the ability to mitigate the occurrence of crises at the organization (Whetten, 1998). Managers are executives with the intelligence to think on their feet to swiftly handle problems as they occur. Management skills help the manager better relate to their subordinates, easing the workflow in the organization (Whetten, 1998). For an organization to thrive and meets its targets, the management should implement excellent management skills.

The most excellent resource in an organization is its workforce. It is, therefore, necessary for a manager to understand how they can effectively manage their talent (Whetten, 1998).  As a manager, the outcome is not always the primary concern. The main purpose of any organization is to make a profit. However, a good manager knows that they need to motivate their staff in order to raise production and employee satisfaction as well (Cowie, 2003). A good manager identifies the employee’s best trait and takes the initiative to enhance their competence in the field. Even though managers are intent on the effort an employee puts in, they should also focus on problem areas that need improving.

The employee may provide a minimal level of outcome expected of them, but a good employee derives satisfaction from their work (Whetten, 1998). A good manager knows how to solve problems as and when they occur. Therefore, managers are detail-oriented and may notice that an employee puts in more effort and innovation into their work. Effort and outcome should be acknowledged and rewarded according to the value it adds to the organization (Cowie, 2003). The most effective way of motivating top performers is by giving them due to recognition. They will feel valued for their efforts and strive to work harder. It also motivates other employees who may seek recognition as well, which will motivate them.

From the conclusions outlined above, managing IT talent is quite because they possess personalities that not typically found in conventional office setups (Austin, 2009). Jim Barton is conflicted since Ivan is brilliant at his job but uses work resources for his projects. He is aware that when Ivan puts in an hour of work, he produces results that are tenfold. Jim Barton should not fire Ivan so long as his project does not interfere with the intended outcome. John Cho should be managed differently because, unlike Ivan Korsky, he focusses more on the personal satisfaction derived from completing his task. Therefore, a manager should be more intent on the way he does his work as opposed to merely focusing on the outcome.

Question 2

Modern companies monitor more of their employee’s activities in the workplace than they previously did. It does not mean that the organization mistrusts its employees (Oz, 1999 ). The first reason organizations monitor their employees is to assess the commission of any mistakes. Modern technological advancements in surveillance make it easier and cheaper to supervise employees from a distance (Oz, 1999 ). Monitoring employees is advantageous in that it aids gather evidence necessary to rectify the mistakes committed by the employee who can see what they did wrong.

The immediate nature of recording mistakes safeguards the relationship between employee and employer (Oz, 1999 ). It eradicates the fear that emanates from uncertainty on mistakes committed in the workplace. Effective employee monitoring also helps managers distinguish the strengths of the employees (Cowie, 2003). Consequently, the employees put in more effort when they learn they are good at something. Finally, monitoring is a useful safety mechanism. Monitoring employees dissuades them from breaching the organization’s policies (Oz, 1999 ). Monitoring systems also prevent the occurrence of accidents by consistently monitoring for hazardous occurrences.

However, monitoring is not allowed in some areas to safeguard the employee’s privacy. It is illegal to install monitoring equipment in bathrooms (Oz, 1999 ). People should not be monitored in places likely to cause them indignity. The rules for monitoring customers are similar to those of employees. Surveillance capitalism presents a unique danger to personal privacy because a lot of users’ information is made available for marketing purposes. There is, therefore, a high likelihood of data breach and the personal information of users made public.

Question 3

IVK Corporation should standardize its existing systems so that they become more flexible. Flexibility in an organization is vital as it improves dynamism to market forces. By using “Strict enforcement,” the IT department would decide the organization’s standards and ensure that they are strictly enforced, reducing the time spent arguing on the most favorable platforms.

IT standards should not get in the way of innovation. Instead, the two need to collaborate to be effective in an organization. The manager should realize when standardization is best or when innovation is needed to run the organization effectively.

Question 4

It is important to note that a crisis can befall any organization. The best way to mitigate losses from the occurrence of a crisis is to prepare for the eventuality (Bernstein, 2004). First and foremost, the most crucial step in mitigating a crisis is anticipating it. Being aware of the particular crisis helps formulate plans to withstand it. Pre-planning helps the organization establish its vulnerabilities with possible solutions when there is adequate time.

The organization can establish notification and monitoring systems that much help during a crisis (Bernstein, 2004). Communication is critical during crises. Currently, there are numerous communication devices at our disposal that can communicate during a crisis. With adequate notification systems in place, information is disseminated quickly, safeguarding lives at the organization. At our organization, the head of security makes security investment decisions. Their primary objective is to ensure the premises are safe and clean. Increasing the use of IT in security surveillance helps monitor the premises more effectively.