10 ms·
As a side note - and not necessarily being this the case - I have seen in my experience companies/institutions that have reasonable "good" security policies and
by jaclaz 9y ago
As a side note - and not necessarily being this the case - I have seen in my experience companies/institutions that have reasonable "good" security policies and provisions at user level (including the "common" employees/contractors) and then a much more lax one at a higher level (like - literally - having the login/password for every system scribbled on a post-it pinned to the IT administrator monitor or allowing some top executives access the systems without login/password - or with "123456" - because it was inconvenient for them to use a secure method).
- yardie 9y agoIn the interest of security we've had to take on a white glove approach to senior execs. No we won't allow you to use the same shitty password. Their assistants handle the password changes.
- jaclaz 9y agoSure, and - actual anecdata, names changed or omitted to protect both the innocent and the guilty,I was present (talking with a top-level executive in a private largish - though not very very large - firm about a possible consulting contract with them) when he attempted accessing his e-mail or something and muttered something like: Strupid IT guys,they must have changed the password again! Then called his secretary/assistant (with the speakerphone on): Hey, Susan, what is the new password? And Susan, promptly replied: It is "123456", I have written it on a post-it I put in your left top drawer. Admittedly the above happened a few years ago (roughly 2008 or 2009), but I wouldn't be so sure that anything has changed much in the meantime.