What is the biggest security vulnerability where you work?

Rouxenator said:
That is not the problem. The problem is morons opening it.
Click to expand...

In the real world it is unrealistic to expect non IT workers to be infallible. These emails get more cunning and realistic by the day - the latest trend is to hit users with an email that looks exactly like it was scanned from your company copier/scanner. Spam and virus scanners are not perfect so occasionally these get through and I guarantee you that a high percentage of even savvy PC users will open an attachment from [email protected] with the right wording and attachment, especially if they have dozens of similar legitimate emails from [email protected] daily.
 
IMHO opinion the biggest threats are:

- Remote desktop sharing (e.g. Teamviewer). I've seen users in corporates with strict access policies giving outside contractors direct access to desktops to circumvent procedures.

- USB sticks

- Cloud based storage

- Private web based email accounts

- BYOD

- Realistic emails with zero day malware payloads
 
1st Non security aware people
2nd security aware people who think they can open all unknown attachments, USB drives and follow links because they work in "security" and open it on their workstations not in VM.
 
My employer's head of IT security is the biggest security vulnerability: this guy believes that blocking Windows updates is a great way to save bandwidth and relies entirely on Symantec, as well as a proxy that he doesn't know how to configure properly and believes is the same thing as a firewall. He also boasts and bleeds info on several social media sites, in short the guy is an idiot and incredibly lazy.
 
j4ck455 said:
My employer's head of IT security is the biggest security vulnerability: this guy believes that blocking Windows updates is a great way to save bandwidth and relies entirely on Symantec, as well as a proxy that he doesn't know how to configure properly and believes is the same thing as a firewall. He also boasts and bleeds info on several social media sites, in short the guy is an idiot and incredibly lazy.
Click to expand...

Why is he the head of IT then.
 
Not much tbh - IT is ka.k paranoid & rightly so. Everything is locked down, encrypted & logged.

Hell I got shat on for trying to bring a personal screen to work.
 
stubborn individuals who refuse to change habits and learn - mistakes from them (leaving the buidling unsecured OR opening virus contained attachments as an example)
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X