Remember "the human factor" when planning security
- IT TOPICS:Security
A couple of months ago Harry Waldron did a short post talking about the human factor in security.
In the article he linked to an interesting piece on viruslist.com that talks about computer security as a holistic system to include the user and some things to think about when securing home PCs or corporate user PCs.
Well worth reading.
Some of it seems like common sense to most people who deal with security, however, it's worth reading as a reminder that the human at the keyboard is just as much a part of computer security as the computer or the operating system running on the PC.
The one thing that stands out for me is how a network admin can enforce good passwords with the best of intentions and yet be powerless to prevent users to write passwords down and keep them near the PC in question or in another insecure place.
It's very important that when dealing with IT Security, professionals take into account the whole system to include the fleshy bags of bones that integrate with the systems in question.
Free Insider Guide