Has Corporate Info Security Gotten Out of Hand?

KoshClassic asks: "What is the right balance between security and productivity, in the corporate IT environment? Looking back at my company, 10 years ago, our machines were connected directly to the Internet, no proxy, no firewall, no antivirus software. Today, my company's proxy server blocks access to: 'bad' web sites (such as Google Groups; our 'antivirus' software prevents our machines (even machines that host production applications) from carrying out legitimate functions, such as the sending of email via SMTP; and individual employees are forced to apply security patches with little or no notice, under threat of their machines loosing network access, if they do not comply by the deadline. On one hand, you can never be too secure, however on the other hand, have we become so secure that we're stifling our own ability to get things done? What is the situation like at other companies?"

Comments

Sorry...

[Necrotica]

What is the situation like at other companies?

I'd love to tell you but that would be a breach of security.

Re:Security is Good on Paper

[Pig Hogger]

Oftentimes management will hand down edicts based on something they've heard or read or even something a customer
...
They may not understand why or how the security measure is preventing legitimate work from getting done.

That's because, in case you haven't noticed, management does not do any legitimate work.

Re:Technology

[NiceGeek]

"Microsoft certification to teach you how to administer properly."
*cough**choke*
Man - you made Coke shoot out my nose on that one. Ever think about going into stand-up?

Re:Management?

[Savantissimo]

Now I feel like I have to take a shower.

Re:Try a University

[metamatic]

They're probably scared he'll learn about SCIENCE.