I’m being policy’d to death!
March 8th, 2010 by Michael GiuffridaI started my business in 1997 with the same basic mantra we use today; provide technology solutions to support business goals. While the technology has changed, the attitude hasn’t. Do what we need to do to satisfy the customer and bill them for an honest amount of time to do it. Well as we have grown that has become more difficult. More staff, more clients and more personalities has caused us to have to put more procedures in place to make sure that everyone is treated fairly and we still have the possibility of making a (small) profit in the end.
Now in comes the Massachusetts data security law and we have another entire set of issues for not only us but all of our clients. We have checklists for them to follow so they are not liable for potentially hundreds of thousands of dollars in fines. Plus we need to have an acceptable use policy (AUP) , a written information security policy (WISP) and now they are talking about PCI compliance because we come in the vicinity of credit cards numbers! What ever happened to “my word is my bond”? I would so rather spend time helping people figure out what makes an effective website, how to handle their technology planning and budgeting, or how to determine the ROI of installing a network server.
No question that running a business in today’s high tech/high risk environment is different than pre-Y2K but I never thought I’d spend more time reviewing internal policies than getting out and helping clients with their businesses. At least we get the opportunity to help our clients create some of these policies too!



I was opening my email one morning and noticed that the “out of office” message from an IT Manager of a local small business that said he was out of the office for the next two months. This was a company I had called on 8 months earlier and the company’s president had referred me to the IT Manager as their technology resource, so I looked up the company president’s name and gave him a call.