HR Information, Safety, and Security

SPHR · 30 questions

• A city's cyber strategy says IT owns data protection, yet personnel files sit in unlocked cabinets and on shared drives. How should HR align employee-file controls?
• Phishing emails spoof the city manager and ask HR staff to send W-2 files. What control actually aligns HR to the organization's cyber strategy?
• Background-check PDFs currently live in recruiters' inboxes and personal downloads. What should HR do to align that documentation with the records strategy?
• A public-records request hits city personnel files. Sunshine law applies, but medical information and Social Security numbers are protected. What privacy process should HR run?
• Supervisors keep medical leave notes in the employee's desk-side personnel file. What privacy-alignment move should HR make?
• A city's HRIS vendor asks to train its machine-learning models on municipal employee records, saying the product will improve for every customer. The CHRO is aligning HR data practices to the city's data-protection strategy. What should the CHRO do first?
• After several county separations, former employees' email and HRIS accounts stay active for weeks because HR closes the personnel file while IT waits for a separate ticket. The CHRO is aligning identity lifecycle to the data-protection strategy. What should the CHRO do?
• Payroll specialists click a fake open-enrollment link that spoofs the city's benefits portal. The CHRO is aligning HR processes to the municipal cyber strategy. Which control should HR and IT apply?
• Hiring supervisors email completed I-9s and Social Security numbers to HR because that channel is fastest. The CHRO is aligning documentation practice to the city's data-protection strategy. What should the CHRO do?
• A public-works superintendent keeps a personal discipline spreadsheet with employee Social Security numbers and notes outside the HRIS. The CHRO is aligning HR processes to the enterprise data-protection strategy. What should the CHRO do?
• The city's OSHA 300 logs are complete, yet field-crew injury rates have not fallen. Safety staff treat recordkeeping as the safety strategy. How should the CHRO evaluate the program?
• A county occupational-health clinic performs employee medical exams and stores the results in the same folder as ordinary personnel notes. How should the CHRO evaluate handling of that health information?
• The city's active-threat and access-control plan covers the civic center but not the remote water-treatment plant. How should the CHRO evaluate emergency-response coverage?
• After a chemical near-miss at the wastewater plant, spill kits were restocked but no one can say who evacuates crews or who is qualified to shut down the process. How should the CHRO evaluate the contingency plan?
• A city-hall protest becomes a staff-safety event. Public-information staff run media updates while employees lack lockdown guidance, internal communications, and aftercare. What should the CHRO evaluate?
• At the city's 24/7 911 center, relief dispatchers share badges so the next person can get in. How should the CHRO evaluate access-control strategy?
• Sanitation crews face rising heat-illness risk. Public works issued a seasonal weather memo. How should the CHRO evaluate the city's OSHA-aligned heat strategy?
• The city has a workplace-violence policy, but restraining-order information never reaches badge control. How should the CHRO evaluate the employee security strategy?
• The county's pandemic-era continuity plan still lists 2020 remote and essential designations. How should the CHRO evaluate employee-safety and contingency readiness?
• A supervisor used HIPAA-covered occupational-clinic records to support a discipline case. How should the CHRO evaluate the safety and privacy strategy?
• Remote public-works yards still use paper timesheets, so labor strategy cannot be reported to council from the HRIS. What should the CHRO include in the time-capture digitalization initiative?
• The city launched employee self-service, but about 40 percent of staff have no work email. What should the CHRO's digitalization plan include?
• A vendor pitches gamified wellness leaderboards that publicize city employees' step counts. What should the CHRO do before buying the emerging technology?
• Department staff post city jobs from personal social accounts with inconsistent pay language. How should the CHRO lead digitalization of social sourcing?
• The city's risk-management system and HRIS do not share incident data, so people-risk cannot inform council strategy. What should the CHRO lead?
• Hiring workflow digitalization routed eleven sequential approvals in the new system—the same bottleneck as paper. What should the CHRO do?
• A vendor offers a free pilot of an AI résumé screener for city jobs. What should the CHRO lead before implementation?
• Council dashboards cannot use HRIS headcount because titles, locations, and status fields are unreliable. What should the CHRO's digitalization initiative include?
• Months after HRIS go-live, managers still email spreadsheet headcount for budget decisions. How should the CHRO evaluate the digitalization initiative?
• An HR FAQ chatbot launched without a source-of-truth owner or escalation path and gave employees wrong leave answers. What should the CHRO lead?