Six Security Sins to Avoid: The IT Darwin Awards

“You’ve heard of the Darwin Awards, which are given out for the
rather grim achievement of doing something particularly dumb and
usually fatal. We’ve heard of a few security mishaps that may have
been career suicide, but thankfully none that have actually proven
fatal. Still, we don’t advocate security Seppuku either. Here’s
some should-be-obvious mistakes to avoid.

“The Written Password

“Walk through any decent-sized company and look around a bit.
Odds are, you’ll find at least a few sticky notes with username and
password combos written down in plain view or tucked neatly under
the keyboard.

“We’re sure we don’t have to tell you not to do this. We hope.
But if you’re part of the security or IT staff in your
organization, make a point of patrolling the premises and peeking
at Post-Its for passwords. You’ll be shocked, and alarmed, at what
you find.”

Complete Story