4 ms·
Definitely, but even that won't fix the issue. Fact is, its so painful to get each user the proper access rights via IT, to the point that nearly no one complie
by StudentStuff 9y ago
Definitely, but even that won't fix the issue. Fact is, its so painful to get each user the proper access rights via IT, to the point that nearly no one complies with the code of conduct they agree to.
The easier you make things, the more apt people are to properly securing their systems. Saying they didn't follow policy, while true, is ignoring the root cause of why the policy wasn't followed.
- draugadrotten 9y ago> nearly no one complies with the code of conduct they agree to Your organisation has a problem which could lead to financial or reputation loss. Is management aware?
- astura 9y agoWe've already established management doesn't care, otherwise we wouldn't have these massive data breaches (practically) every other week and IoT devices with zero security and open access to the world. At a company I worked at 10+ years ago the IT Dept had a generic VPN username/password that they gave out like candy to use if you needed to VPN in and your account was in the process of being setup. It wasn't like this practice was a secret either. I don't know why it took more than a few minutes (?) to setup VPN access.