1. Premier Employee Program Version 4.0
Information Security
Premier Employee Program
Version 4.0
Premier Employee Program Version 4.0
4/18/2019

2. Information Security at JobStreet
Our informational asset is a vital access at JobStreet.
Jobseeker resumes
Employer data
Internal administrative, financial and sales data
Wikis, etc.
Includes
Electronic - Databases, s
Paper form
Spoken
Premier Employee Program Version 4.0
4/18/2019
4/18/2019 2

3. Importance of protecting our information assets
Reputation – TRUST in JobStreet is very important
Compliance with legal contracts (NDA, customer contracts, truste, term of use)
Legal penalties
Loss of business or competitive advantages
Identity theft
Disruption of service
Bad media coverage
Premier Employee Program Version 4.0
4/18/2019

4. Your role in Information Security
YOU can prevent several security threats facing JobStreet.
Comply with our corporate security policies at:
You have 2 weeks to read and sign-off the policy after your first day of work
Premier Employee Program Version 4.0
4/18/2019

5. Your role in Information Security
Key policies applicable to all staff
Information Security Policy
Acceptable Use Policy
Incident Management Plan
Truste Privacy Policy
Application and Data Access Control Policy
Premier Employee Program Version 4.0
4/18/2019

6. Handling Confidential Information
All information obtained in the course of duty are strictly confidential.
Under NO circumstances should you divulge to any unauthorized persons within and / or outside the Company.
Premier Employee Program Version 4.0
4/18/2019
4/18/2019 6

7. Questions to Ask
Is the information I am about to review legitimate / authentic?
Have I contacted appropriate JobStreet personnel regarding my uncertainty on handling sensitive situations?
Could the actions I am about to perform in any way either harm myself or JobStreet?
Is the information I am currently handling of vital importance either to myself or JobStreet?
Premier Employee Program Version 4.0
4/18/2019

8. Who to Contact
Its critical you contact appropriate person in charge the moment you suspect something is wrong
Incident Classification
1st Level Notification to Response Team
2nd Level Update 1
Unauthorized access, circulation or distribution or loss of customer and jobseeker database
Application Owner
ISO/CTO (immediate notification required) 2
Unauthorized access, circulation or distribution or loss of financial information
Group Finance
ISO/CTO & CFO (immediate notification required) 3
Loss of accessibility to systems
Application Owners
CTO 4
Other security related IT incidents
Local IT Officer
Infrastructure Ops Manager 5
Loss of fixed asset
Local Department Head and Local Facility/Security
Country Head and Group Finance 6
Security related operational incidents not related to IT systems
Country Head and COO
Contact if you are unsure of who to inform for any security incidents.
Premier Employee Program Version 4.0
4/18/2019

9. Information Security Policy
Objective: Protect the integrity, confidentiality and the accessibility of information
Confidentiality
People obtaining or disclosing information inappropriately
Integrity
Information being altered or erroneously validated, whether deliberate or accidental
Availability
Information not being available when it is required
Premier Employee Program Version 4.0
4/18/2019

10. Information Security Policy
Responsibilities
Obligation to protect our information assets, systems and infrastructure.
Everyone will respect the information assets of third parties.
Actual or suspected security incidents must be reported immediately to the functional department head relevant to the incident.
Report of any security shortfalls in our existing security practices or improvements should be reported to senior managers.
Premier Employee Program Version 4.0
4/18/2019

11. General Information Security Measures
Keep your laptop in your possession and within sight
The anti-virus software MUST be updated as soon as the update is available – turn on the service auto-update
If desktop/ laptop is unattended, screen lock it
Premier Employee Program Version 4.0
4/18/2019

12. General Information Security Measures
Back up data by uploading data onto network file server
Do not leave confidential documents unattended at the printer or fax machine
Report any security incidents (such as virus infections) promptly to
New Hire Orientation Version 3.0
4/18/2019
Premier Employee Program Version 4.0

13. General Information Security Measures
Safe surfing on a public wireless connection
Up-to-date anti-virus software
Two-way firewall
Turn off the wireless radio
Avoid entering sensitive personal info
Turn off file sharing
Don’t type any passwords unless the site is secure
Look for addresses that begin with “https” – secure (BUT, it’s not failsafe)
Premier Employee Program Version 4.0
4/18/2019

14. General Information Security Measures
Password management
NEVER share your password with anyone
Don’t write down your passwords anywhere
Do not download, install, or use unauthorised software programs.
Do not download, forward, print or post inappropriate materials:
Premier Employee Program Version 4.0
4/18/2019

15. Phishing Scams Phishing: Designed to steal your identity
Forms of phishing messages
Appear to be from someone you know
Premier Employee Program Version 4.0
4/18/2019

16. Phishing scams
Might ask you to make a phone call to a number listed in the
Might include official-looking logos
Premier Employee Program Version 4.0
4/18/2019

17. Phishing scams
Might include links to spoofed websites where you are asked to click and enter personal information
Premier Employee Program Version 4.0
4/18/2019

18. Phishing scams Phrases to look for in a phishing scam
“Verify your account”
“You have won the lottery”
“If you don’t respond within 24 hours, your account will be closed” – makes you panic
Premier Employee Program Version 4.0
4/18/2019

19. Phishing scams How to avoid
NEVER reply suspicious-looking s asking for personal info
NEVER give out personal information (eg: passwords) through to anyone
NEVER use links in an to get to a website
Premier Employee Program Version 4.0
4/18/2019

20. Phishing scams How to avoid
NEVER enter your personal info in a pop-up screen
Call the company/ IT department directly
Premier Employee Program Version 4.0
4/18/2019

21. Phishing scams Phishing can happen by phone
NEVER give your personal information over the phone
Verify the caller’s identity
Ask for the person’s name
Get the main phone number from JobStreet’s contact list/ internet directory
Find out if the call was legitimate
Install anti-virus and anti-spam software
Report suspicious activity to or
Premier Employee Program Version 4.0
4/18/2019