Recommendation Contents
The Bureau of Information Resource Management should: - issue regular notices to remind Department employees of the risks associated with the use of non-Departmental systems; - provide periodic briefings on such risks to staff at all levels; and - evaluate the cost and feasibility of conducting regular audits of computer system usage to ascertain the degree to which Department employees are following the laws and policies concerning the use of personal email accounts.
