Conference 7.286::digital

91.0. "your home phone number to your manager in case..?" by PRSIS3::DTL (Paris, France) Fri Mar 14 1986 11:12

        <<< SYS$SYSDEVICE:[NOTES$LIBRARY]SECURITY_INFORMATION.NOTE;1 >>>
                 -< Digital Worldwide information on SECURITY >-
================================================================================
Note 24.0        template for SW security incident report form         6 replies
PRSIS3::DTL "Paris, France"                         475 lines  13-MAR-1986 13:02
--------------------------------------------------------------------------------
[here was a report without link with the subject]
   
================================================================================
Note 24.1        template for SW security incident report form            1 of 6
PRSIS3::DTL "Paris, France"                          16 lines  13-MAR-1986 13:12
                 -< comments on the delivery emergency levels >-
--------------------------------------------------------------------------------

    FLASH	the addressee has to be found and contacted wherever s/he is
		(at home, on vacation, busy, sleeping, etc..)
    
    AT ONCE	the adressee has to be disturbed whatever s/he is doing at work
		(conference, JP&R, in the Country manager's office, etc..)
    
    URGENT	the adressee must be contacted in person as fast as possible
    		and as soon as s/he is available

    NONE	the adressee may get the report via mail, electronic mail,
    		interoffice memo on his/her desk, etc..

    This document in .0 is a working draft. All comments in this note are
    welcome.
    
    Didier
================================================================================
Note 24.2        template for SW security incident report form            2 of 6
SQUAM::HALPIN                                        20 lines  13-MAR-1986 17:53
--------------------------------------------------------------------------------

       	Didier,
    
    		Who is the 'addresse'??? 
    
    		Regarding the FLASH level. I don't know about anybody else,
    but if I ever get contacted about a work-issue while on vacation, I'm
    going to get mighty upset!  Delegate your responsibilties to a coworker
    while on vacation.
    
    		As far as contacting people 'at home' and 'while sleeping',
    this is asking too much unless the 'addresse' is getting beeper
    pay.

    		This may be nit picking, but I will never agree to any
    thing worded like that.

    Jim
        
================================================================================
Note 24.3        template for SW security incident report form            3 of 6
PRSIS3::DTL "Paris, France"                          11 lines  13-MAR-1986 19:38
                               -< some comments >-
--------------------------------------------------------------------------------

   Sorry. I should have given more details.
   As this document is for reporting incidents and/or asking for support,
   it is mainly to be sent to the european security manager and the Corporate
   Security director.
   
   If the issue is real urgent, a FLASH level could be necessary.
   
   In security, we are often waken up at home, you see!
   (and I have been asked to give my personal phone number in case...)

   Didier
================================================================================
Note 24.4        template for SW security incident report form            4 of 6
HUMAN::CONKLIN "Peter Conklin"                        6 lines  14-MAR-1986 02:50
                           -< my home phone number >-
--------------------------------------------------------------------------------

    All the managers above me, and many of my peers have my home phone
    number. Also, my direct reports have my home phone number. I don't
    frequently get work calls at home, but when I do, it has always
    been worth the interruption to me. I infrequently call others, but
    when there is a critical personnel or customer issue, I will make
    such a call.
================================================================================
Note 24.5        template for SW security incident report form            5 of 6
SQUAM::HALPIN                                        14 lines  14-MAR-1986 15:34
                                -< Mine Too!!! >-
--------------------------------------------------------------------------------
    
    My manager and my co-works have my home number also.  I am not often
    called at home.  But that is an informal set up.  If you start writting
    any down stating that under certain circumstances, I *will* get
    called, then I will demand I get put on a beeper. 
    
    This whole thing is a rat-hole.  It really has nothing to do with
    security, so I probably should not have brought it up. I just didn't
    agree with the wording Didier used.  If you wish to continue this,
    we should probably move it to the DIGITAL (way of working) Conference.
    
    Jim
--------------------------------------------------------------------------------
done!
   

In my opinion, FLASH should only be used in life-threatening situations. 
Hopefully, we shall never have such a situation within Digital.

As for contacting someone on vacation - if the responsibilities cannot 
be delegated to someone else, then the vacation should be postphoned 
until the "crisis" has past or the responsibilities can be delegated.
A vacation is suppose to be just that - a vacation;  a time to take 
one's mind away from work.

Personally, I think it's poor management to have such key 
responsibilities left to one person. What happens when that person is 
sick, injured, or even dies? Besides, delegation of responsibilites to 
subordinates also trains and prepares the subordinates for promotion.



Being contacted after hours: I don't mind an occasional call, but if 
they are going to occur with any regularity, especially if I'm already 
asleep, I expect to be compensated for it.

At the moment, I have an agreement with my manager. Since I don't get to 
the office for days at a time, I read my DECmail every night. I call in 
during the day, or leave a number that I can be reached, in case 
something urgent arises. So far, it's been working out real well.


MartyJ

    I recall a story (I can only vouch for the truth of my part in it.)
    of a field engineer who was on vacation (Michigan, I think) who
    was enticed away from his vacation in the back woods to join a small
    team (he 'n me) bailing out a critical customer just north of the
    border...
    
    It was late one Saturday evening when the phone rang.
    
    "You don't have to buy into this, Bill, but..." were the first words
    my manager spoke.  "There's a plane leaving for Toronto at 6:35
    tomorrow morning.  At the moment, you're the best available person
    in the company...  It's a KO call and you're authorized to do whatever
    you think is right.  We're working on getting ahold of <...> but
    he's on vacation in Michigan.  The Branch Manager out there has the
    address and has left to drive out to the cabin to get him, but they
    aren't sure they'le be able to find him.  It'll be great visibility..."
    
    
    
    		I made the flight...
    
    
    					<he> arrived early Monday...
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    We left 2 weeks later...  He went back to Michigan.
    
    		Would I do it again?
    
    
    			      ...well, you don't have to buy into this...

    reply to some of the comments in .0
         
    
    DIGITAL is a company wich has to be committed to some customers
    24 hours a day, seven days a week.
    
    Management of course has to implement enough structures to respond
    to most of the crisis. (Enough skilled or trained people, adequate
    duty lists). Still some situations require exceptional resources.
    One duty engineer cannot handle four difficult calls at the same
    time.
    
    <Flame on /justified>
    I cannot understand that some people want responsabilities at work
    (and corresponding pay), but refuse to be called at home.
    <Flame off>
    
    Being called out of vacation is an extreme, but I saw it happen.
    I think the engineer in .-1 should be entitled to a mini-trip with
    family on company expenses.