I have a ticket for suspected virus\malware on a users computer. I installed the anti-virus\malware software but the user got called away before I could update. That was 3 days ago. I’ve tried multiple times to contact the user to perform the update, scan, and removal but he’s always “too busy”. I contacted him today and again, the same excuse. I reminded him that information security is our number one priority and all else comes second. He argued that he didn’t have time and that his job was far more important as he was interviewing candidates and reviewing resume’s. Well… per policy, he’s wrong, and per policy, if I can’t resolve the issue within 3 business days I’m to disable his account, change his password and remove his computer from the domain…
I called him one more time and advised him of the policy and he flipped out. I further advised him that it would take substantially less time to udpate and scan than it would to re-train him on policy than it would to update, then scan, then re-enable his account; but again, he argued. I emailed his supervisor a copy of the policy (updated 2 weeks ago) and a copy of the ticket before disabling the users’ account
