HR: What (idiot)^2 would put *that* on the net? (Score 1)

Ideally, HR data should be stored in a secure facility on an encrypted disk with access restricted to cleared (not just "bondable") and trained personnel. (Other employees may need to see their own files once in a while, but they most assuredly do not need direct write access.) The only outside access should be a secured line to your offsite backup facility. (If someone complains, TS. We're talking about the financial security of all the employees versus a few HR people having to commute or someone not getting their preferred vacation slot.) Even in the smallest mom-and-pop company, it should at least be locked in a UL-approved container in the back office, out of view of the general public.

--

N. Evil Genius