Christian Narine November 13th, 2020
BUS311 1900 Professor Brielle Buckler
Assignment: Safety, Health, & Risk Management
A particular new risk that companies are facing in 2020 that were potentially not considered in prior decades are the risks of cyber threats. As more and more organization conduct business to business transactions over the internet & directly with customers & consumers through a web or internet portal, the potential for cyber attacks have become more prevalent, and smarter.
These risks are so important to focus on for several reasons, mainly it can cause reputational damage to an organization. Attacks should be identified immediately, escalated to relevant technology managers, HR managers & Executive team and handled swiftly, as interruptions to a company’s technology platform affects workplace productivity, customer satisfaction, and eventually, profits They can result in the theft of valuable, sensitive data like medical records or customer credit cards records. For instance, the Target credit card Hack -which affected customers who shopped at U.S. Target stores between [2013] November 27 and December 15, Target said. “Customer names, credit or debit card numbers, expiration dates and CVVs were involved in the information theft.”
Some of the more popular variants of cyber attacks that companies need to be aware of & mitigate include:
- Ransomware – An attack that involves encrypting data on the target system and demanding a ransom in exchange for letting the user have access to the data again. These attacks range from low-level nuisances to serious incidents, for example- like digital extortion aimed at Atlanta. The locking down of the entire city of Atlanta’s municipal government data in 2018 by a ransomware attack.
- Phishing – An email-borne attack that involves tricking the email recipient into disclosing confidential information or downloading malware by clicking on a hyperlink in the message.
- Spear Phishing – A more sophisticated form of phishing where the attacker learns about the victim and impersonates someone he or she knows and trusts.
Cyber threats come from a variety of places, people and contexts. Some of these include:
- Business competitors
- Industrial spies
- Unhappy insiders
- Hackers
- Terrorists
It can be a scary time for businesses and consumers who are worried about cyber threats. The threats certainly exist. Even if a company is targeted by a powerful perpetrator, it is still possible to protect critical digital assets. Organizations can prevent these risks from coming to fruition by making the investments in planning, commitment of resources and a coordinated response from Executive management, Technology Managers partnering with HR managers to implement a comprehensive Cyber Awareness Training program on a regular cadence in conjunction with a robust Technology cyber defense countermeasure program. This is not only good for business, but it is good security & proactive, so employees & the company can stay on top of most serious cyber threats.
Cyber threats certainly can have an impact at your comfort at work and the willingness to work at a particular organization, mainly by how much ‘big brother’ is looking at your online activity. Another privacy issue that comes up often is the monitoring of employee activities on devices that are provided to them by the organization. From Chapter 13.2 – Generally, Case Law decided that employees do not have privacy rights if they are using the organization’s equipment. And some organization’s can be more restrictive, requiring more stringent security measures when entering and leaving the company premises. It is important that HR Managers working with the company’s Technology department implement and communicate standards. When an organization finds it necessary to implement monitoring policies, the HR Managers must communicate the following to ensure employee buy-in of the monitoring:
- Develop a policy for monitoring.
- Communicate what will be monitored.
- Provide business reasons for why e-mail and Internet must be monitored.
Followed by regular communication of a privacy policy is an important step as well.
Another new risk that companies are facing in 2020 that were potentially not considered in prior decades is the risk of second-hand smoke. I found this to be particularly interesting as I notice employees daily, at regular intervals through Winter, Spring, Summer, Fall, huddled outside the fronts of office buildings further and further away from main entrances, relegated to a small corner of a sidewalk or public park.
Promoting a Culture of Safety and Health – These risks are important to focus on because employee health and safety is a must in today’s high-stress work environments. Although it may appear that employee health is something that shouldn’t concern HR, the increasing cost of health benefits makes it in the best interest of the company to hire and maintain healthy employees.
Workplace Health, security and safety is the responsibility of everyone in the organization & helps to prevent these risks from coming to fruition. HR professionals and managers, play a large role in developing standards, making sure safety and health laws are followed, and it is also important to note that some state standards are different from federal standards, which means the HR professional will need to be aware of the laws in the individual state in which the company is operating.
From our Chapter 13 reading; “In the United States, twenty-six of the fifty states have smoking bans in enclosed public spaces. These smoking bans are designed to protect workers’ health from the dangers of secondhand smoke. A recent report released by the Centers for Disease Control and Prevention (Steenhuysen, 2011) says that state or local smoke-free laws cover 47.8 percent of workplaces. The report says if the trend continues, the United States will be 100 percent smoke free by 2020.” Most workplaces have no-smoking policies because of rising health-care costs. Smoking can have negative employee health effects that can result in lost productivity, can raise health insurance costs and cause employee turnover.
Benefits to a Smoke-Free Work Environment- For the Employees:
- A smoke-free environment helps create a safer, healthier workplace.
- Workers who are bothered by smoke will not be exposed to it at work.
- Smokers who want to quit may have more of a reason to do so.
- Smokers may appreciate a clear company policy about smoking at work.
- Managers are relieved when there is a clearly defined process for dealing with smoking in the workplace.
Benefits to a Smoke-Free Work Environment -For the Employer:
A smoke-free environment helps create a safer, healthier workplace.
- Direct health-care costs to the company may be reduced.
- A clear plan that is carefully put into action by the employer to lower employees’ exposure to secondhand smoke shows the company cares.
- Employees may be less likely to miss work due to smoking-related illnesses.
- Maintenance costs go down when smoke, matches, and cigarette butts are taken out of work facilities.
- Office equipment, carpets, and furniture last longer.
- The risk of fires is lower.
- It may be possible to get lower rates on health, life, and disability insurance coverage as fewer employees smoke.
An organization that promotes a Culture of Safety and Health will have a positive impact on some employee’s comfort at work and the willingness to work at a particular organization if their lifestyle aligns with the organization polices on promoting a healthy lifestyle. Alternatively, someone who smokes, might not be as amenable with the no smoking polices and smoke free zones. However, the HR manager can provide resources to the employee about the organization’s employee assistance program, EAP. To reference Unit 9 Benefits- This benefit is intended to help employees with personal problems that could affect their performance at work. The EAP usually includes, covered counseling and referral services. This type of program can assist employees with addictions, emotional issues such as depression, stress management, or other personal issues.
Promoting a culture of Safety and Health doesn’t only happen by requiring training sessions every year; it occurs by creating an environment in which the employee can recognize the resources available them with regular Benefits communication from the HR Manager. As an HR Professional, other possible techniques that can be implemented to have a safe and healthy work environment can include the following:
- Commit the resources (time and money) necessary to ensure a healthy work environment.
- Involve employees in safety and health discussions, as they may have good ideas as to how the organization can improve.
- Make safety part of an employee’s job description; in other words, hold employees accountable for always practicing safety at work.
- Understand how the health (or lack of health) of your employees contributes to or takes away from the bottom line and implement policies and programs to assist in this effort.
Work Cited
Wallace. Gregory. Target credit card hack: What you need to know
https://money.cnn.com/2013/12/22/news/companies/target-credit-card-hack/. Accessed Nov 13, 2020
Blinder,Alan. Perlroth, Nicole. A Cyberattack Hobbles Atlanta, and Security Experts Shudder
https://www.nytimes.com/2018/03/27/us/cyberattack-atlanta-ransomware.html. Accessed Nov 13, 2020
University of Minnesota, M Libraries. Chapter 13 Human Resource Management
https://www.oercommons.org/courses/human-resource-management-3/view /. Accessed Nov 13, 2020
Taylor, Hugh. What Are Cyber Threats and What to Do About Them
https://preyproject.com/blog/en/what-are-cyber-threats-how-they-affect-you-what-to-do-about-them/. Accessed Nov 13, 2020