The bMighty ANTenna
News From Around The Web

Security Threat: Ignorant Users?

Tuesday, January 29, 2008
By bMighty.com Staff

The survey asked 455 CIOs how they could improve security, and 48 percent named more awareness of the issue among employees; 25 percent said more awareness among senior management. "They see the end user as the weakest link," said David Kelleher, project leader for research at GFI. Kelleher said that even at companies with security policies, end users don't often understand the reasoning behind them. He recommended that companies implement rigorous security training programs.

Gary Chen, an analyst with Yankee Group, agreed with the diagnosis but not the cure. "Certainly end users are a big hole for most people, because end users are not going to be your most technically competent people....[But] I guess I'm not truly convinced that you can seriously make a dent in that problem," he said. "You can do all the training you want, but people are just going to be stupid and you're not going to be able to do much about it." Chen's prescription: implement technological solutions that assume people are going to do the wrong (or stupid) thing.

Source(s): CIO-Midmarket.com