Eight Clerks, One Login and a Camera Pointed at the Screens
A microfinance agency in Garoua employs eight data-entry clerks who key in loan records for seven hours a day, with two 15-minute breaks. Staff complain of burning eyes, headaches, and neck and wrist pain. The office has eight desktop PCs on tables 70 cm high; monitors sit with their backs to a large unshaded window; chairs have no height adjustment; work continues through the hottest hours with the air conditioner switched off to save money. All eight clerks share the username 'entry' and the password 'garoua2024', so the system log cannot show who changed a loan amount. After two unexplained changes, the manager proposes installing key-logging software and a ceiling camera pointed at the screens, and tells staff they will be dismissed if they refuse. Head office in Douala requires an audit trail for every change and a data-protection policy under which clients must be told how their data is used.
1. Identify four health and safety risks in this office, propose a practical remedy for each, and rank them by likely impact.
Read the worked answer
1. Musculoskeletal disorders (highest impact). Seven hours of keying on 70 cm tables with non-adjustable chairs forces wrists to bend and necks to crane. Risk of repetitive strain injury and chronic back pain. Remedy: adjustable chairs with lumbar support, footrests where feet do not reach the floor, keyboard at elbow height, wrist support, and posture training. This ranks first because the exposure is daily and the injury is long-lasting.
2. Visual fatigue and headaches (high impact). Monitors are backed against an unshaded window. The bright background makes the screen look dim, causing glare and constant refocusing. Remedy: turn desks 90° to the window, fit blinds, adjust brightness and contrast, use the 20-20-20 rule (every 20 minutes, look 20 feet away for 20 seconds), and offer eye tests.
3. Heat stress and fatigue (seasonal, moderate–high). Garoua is hot; an off air conditioner in a closed room with eight PCs raises temperature and error rates. Remedy: run the air conditioner or fans with ventilation, provide water, and schedule demanding reconciliation work in the cooler morning.
4. Prolonged static posture and poor electrical practice (moderate). Two 15-minute breaks in seven hours are too few; trailing leads and overloaded sockets add trip and fire risk. Remedy: a 5-minute break each hour away from the screen, task rotation, cable trays, and a checked earth connection.
Ranking by impact: musculoskeletal and visual risks first (daily, cumulative), then heat, then electrical/trip hazards.
2. Evaluate the manager's monitoring proposal. Is it a proportionate solution to the audit problem? Recommend an alternative.
Read the worked answer
Evaluation: the proposal does not fit the problem, and it creates bigger ones.
- Key-logging software captures every keystroke, including clerks' own passwords, loan amounts and clients' personal data. It creates a new store of sensitive data that itself needs protection, and it can be read by anyone with access to the tool.
- A camera aimed at screens records client loan information continuously, not just the two suspicious changes. It is indiscriminate surveillance of all eight staff for the acts of one or two.
- The threat of dismissal for refusal removes free consent and damages trust; staff may hide errors rather than report them, which makes the audit problem worse.
- Data protection: head office requires clients to be informed how their data is used. Filming screens and logging keystrokes introduce processing that the policy does not cover, and may be unlawful without a lawful basis and notice.
Better alternative: fix the identity problem at its root. Give each clerk a unique account with a strong password and role-based rights; enable an application audit log that records user, timestamp, record ID, field changed, old value and new value for every loan modification; make the log append-only and review it weekly; restrict amount changes to a supervisor's approval. A camera at the door for physical security, not at screens, is defensible. This is proportionate: it targets the audit gap, minimises collected data and preserves dignity.
3. Explain how the shared login defeats the audit trail, and describe how unique accounts, access rights and review solve it. State one training need.
Read the worked answer
How the shared login defeats the trail: every action is recorded against the single user 'entry'. The log can show that a loan amount changed at 14:32, but not whether the clerk at PC 3, the supervisor or a visitor did it. Because the password is known to all eight staff (and possibly former staff), anyone can act as 'entry'; there is no non-repudiation, and a clerk cannot prove innocence. The two unexplained changes are therefore untraceable by design, not by bad luck.
Solution:
- Unique accounts: one username per clerk, with a password that is not shared and must be changed periodically. Each log entry then names a person.
- Least privilege / role-based access: clerks may create and view loans but not alter approved amounts; only a supervisor can approve a change, and that approval is itself logged. This limits what a compromised account can do.
- Review: the supervisor checks the audit log weekly and after every client complaint, looking for out-of-hours edits, repeated changes to the same record, and changes made from another clerk's PC. The log must be append-only, with no delete rights for ordinary users.
- Sessions: automatic screen lock after a few minutes' inactivity stops one clerk continuing under another's name.
Training need: a short session on why passwords must never be shared, how to lock the screen when leaving the desk, how to report a suspicious change, and what the data-protection policy says about client information. Training must be recorded, and the policy applied consistently to supervisors as well as clerks - otherwise the audit trail is only as good as the person exempted from it.