Survey: IT staff would steal secrets if laid off
Most IT staff would steal sensitive company information, including CEO's passwords and customer details, if they were laid off, according to a new survey from Cyber-Ark.
A staggering 88 percent of IT administrators admitted they would take corporate secrets, if they were suddenly made redundant. The target information included CEO passwords, customer database, research and development plans, financial reports, M&A plans and the company's list of privileged passwords.
The research also revealed that, of that 88 percent, a third would take the privilege password list to gain access to valuable documents such as financial reports, accounts, salaries and other privileged information.
Identity management firm Cyber-Ark conducted the survey of 300 IT professionals in its annual review 'Trust, Security & Passwords'.
Udi Mokady, co-founder and chief executive of Cyber-Ark, said that company directors were "blissfully unaware" of the administrative or privileged passwords information that IT staff have access to. "These privileged identities, which lie on hundreds of servers and applications, very rarely get changed as it is often considered too much hassle. When people leave the organization, they can often still access the network using these passwords to acquire an organizations' most sensitive information," he said.
IT administrators are not exempt from keeping sloppy security habits. The survey found that one third of IT staff still keep passwords on post-it notes. And 35 percent admitted to sending highly confidential information via email or couriers.
The survey also found that one third of IT staff admitted to snooping around the network, looking at highly confidential information, such as salary details and people's personal emails.
Mokady warned companies to routinely change and manage passwords. "You can install the best security systems in the world, but if your staff do not respect the information they are entrusted with, then the information will definitely go astray -- just as the findings of this survey have illustrated."
A quarter of companies surveyed admitted to suffering from internal sabotage and/or cases of IT security fraud. One third of companies believe that industrial espionage and data leakage is rife, with data being leaked out of their companies and going to their competitors or criminals, usually via high gigabyte mobile devices such as USB sticks, iPods, Blackberry's and laptops or even sent over email.
» posted by ITworld staff
Computerworld UK
Build your tech library with our book giveaways.
Windows PowerShell 2.0 Unleashed
By Tyson Kopczynski, Pete Handley, Marco Shaw; Published by Sams
Windows PowerShell Unleashed will not only give you deep mastery over PowerShell but also a greater understanding of the features being introduced in PowerShell 2.0–and show you how to use it to solve your challenges in your production environment. Enter now!
Ubuntu Server Administration
By Michael Jang; Published by McGraw-Hill Osborne Media
Realize a dynamic, stable, and secure Ubuntu Server environment with expert guidance, tips, and techniques from a Linux professional. Ubuntu Server Administration covers every facet of system management -- from users and file systems to performance tuning and troubleshooting. Enter now!
A post-it note under the
A post-it note under the keyboard in a secure office in a secure building may be more secure than the data it is protecting if the computer's security is easy to defeat over the network.300 is nowhere near a
300 is nowhere near a representative sample...Agreed, did they take this
Agreed, did they take this sample from government employees?