What is the biggest security vulnerability where you work?

[Rouxenator]

Client data that is stored globally in many data centers. You need to keep that safe in a multitude of locations while keeping it in sync.

 

[NarrowBandFtw]

People

We deal with data that fetches a pretty penny on the black market and at the same time the company believes in giving everyone insight into said data (rightly so). It makes for interesting challenges for the security guys no doubt.

 

[Peterkb]

People and their passwords (or lack of them)

 

[adriancr]

The Staff

 

[Co_Matrix]

Probably staff opening email hey are not supposed to. Even after warning them on multiple occasions! Eish

 

[Arthur]

Idle thought:

All you guys saying "people" and "staff" makes me wonder what sort of training your employers give, and what sort of disciplines they enforce.

Sounds more like a management problem to me.

People are the greatest asset. It takes wise and skilful management to get all the arrows pointing in the same direction. If they can't operate the machinery and handle the tools, management needs to takes good look at itself.

 

[maccaman]

Temptation and opportunity, which results in people trying to outsmart systems/processes - mostly unsuccessfully.

 

[JohanSmal]

Staff.

 

[scienide]

Security staff

 

[Vio]

Reactive network security instead of proactive security.

 

[ambo]

Sounds more like a management problem to me.

People are the greatest asset. It takes wise and skilful management to get all the arrows pointing in the same direction. If they can't operate the machinery and handle the tools, management needs to takes good look at itself.

Good point. Biggest risk I've seen is management expecting all staff to be security specialists. Imposing crazy password policies and other inconveniences and then expecting people not to work around then to get their work done.

If your security policies make life hard for staff then you're doing it wrong.

 

[midnightcaller]

The staff making kilo liters of coffee every day and distributing around the office

The staff handling the food in the canteen

The staff at the company distributing the water coolers and refills

The security guard who is in the 11th hour of this 12 hour shift

Edit: oops , I missed the boat. This has nothing to do with protecting sensitive information.

 

[midnightcaller]

Let's try again

Uncontrolled access to printing and photocopying

Unrestricted Access to cloud data stores

The process to destruct hard drives in laptops and servers

 

[Tumsh]

Email and staff. If a phone or laptop is stolen or lost.

 

[Ernestbes]

What do you think is the biggest security vulnerability at the company where you work? What is the biggest weakness in protecting the company’s sensitive information?

Please do not mention your company’s name in this discussion.

The ignorance and innocence of the people that work there.

 

[Cius]

People are always the weakest link.

 

[MarkusAurilius]

Ignorant users... problem is not the people who know very little... they only do what they know... the problem is the person who thinks he knows a lot... they usually do things they are not supposed to

 

[Zodiac69]

The people that work for the company.
We still have this attitude that it will not happen to me, that goes for Cyber security as well.

 

[MattRoy]

Building security...

 

[aadili]

Malicious emails containing ransomware