We have a few employees working from home and have the correct connection that IT set up. Now HR is questioning this. Does anyone have a policy they would be willing to share that regulates this, and at what level do you allow employees to work from home?

This is not unusual in a day of flex-scheduling and working with new mothers, etc. My previous bank did this - our IT dept would actually send someone to the employee's home to install the correct "software", etc - to link their home computer to our network and provide the appropriate spamware, firewalls, etc -
Typically this was allowed to SVP's and higher - or an a case by case basis - reviewed by HR and IT.

What exactly is HR questioning, if I can ask?

What is the difference in this and a company issued laptop that is set up for off-site access? It is becoming more and more common. With the correct security in place, it isn't anymore dangerous than the PC at your desk.

Is your HR also concerned about the company issued Blackberrys?

There concern is the integrity of the data. Because of Privacy they are questioning if there should be remote access for employees, particularly in the finance area, to have access by VPN. They are company issued laptops and the bank provided all the installation. I am not sure if this is them not understanding, but IT is also questioning the "fairness" of this setup.

Wasn't aware it was IT's job to determine 'fairness' - I thought that was up to the Executive Management as to how they want to operate the company <said tongue in cheek, slightly>

Our employees had a line run to their homes, just like those to our banking centers - integrity of data was not an issue that way. Unless they're saying that Joe the anaylst may leave the room and his wife might come in and see data on the screen - if that's the data integrity they're worried about, tell them to visit a banking center- scary what's left out for customers to see!

Sounds like IT wants to work from home, too - and they can't.

I'll insert my comments for comparison and another point of view. My bank does not allow any access from home whatsoever, there are no bank-issued laptops or Blackberries/PDA's, no USB "thumb"/"travel" drives are allowed in bank computers, and the policy prohibits emailing data out of the bank. Access to our network is from within the bank building only. Concerns over GLBA and data security/integrity drive this policy. It may seem archaic to some, but that's the rule and we make it work every day.

Thanks for your feedback. We are definitely not that strict, but if you can make it work, that is great.

I am still looking for someone who would be willing to share their policy or procedures for remote access. Thanks!

Sorry, no policy or procedure for remote access, but I can honestly say I see no reason to not have limited remote access to the network for senior employees. A number of reasons can keep a manager at home - sick, bad weather, personal reasons. Technology allows secure access to the network from a remote location; utilize the technology so your senior people can continue to work if they are unable to come into the office.

IT and HR shouldn't have any sway in this decision. IT's role is doing it if Executive Management says so. HR shouldn't be involved in this in any way what-so-ever.

I have comprehensive policies, but not in a form that could be shared...sorry! We have quite a few strategic employees that either 1)work from home 2)have mobile access. In saying that, we also have an awesome IT department who is extremely well versed in protection.

witin our IT policy we cover remote access for designated employees. You may want to insert what your procedure would be and who has access. We limit access to Sr mgmnt and key personnel and state this as a "disaster recovery" option as well.

That's an excellent point Ducati - part of our pandemic flu exercise is for key personnel to be able to work from home - as customer service (interacting via e-mail with customers) - loans, etc.