Workers Cause More Problems Than Viruses
Technical Writing Geek writes "A new report finds that, for the first time, virus infections have slipped to the second spot on the list of computer security troublemakers. In first place— a company's own workers. 'The Computer Security Institute has just released the 2007 edition (PDF) of its long-running "Computer Crime and Security Survey," and it offers some dreary news for overworked computer security admins: average losses from attacks have surged this year. More surprising is the finding that the single biggest security threat faced by corporate networks doesn't come from virus writers any more; instead, it comes from company insiders.'"
USB thumb drives are an on going headache, and an attack vector on top of that. I'm forced to wonder how serious any of these issues would be if we didn't live in a windows centric world.
Outside windoze, the attack vector is gone, there's little need for a thumbdrive because network services work securely, and finally it's easier to make sure information is shared on a need to know basis. That these services are lacking in the non free software world is an indictment of the non free software way, which starts with secrets to begin with. Beyond these precautions, you are left with HR type issues like not hiring someone who's going to sell your client information. Before these precautions, blaming employees is a waste of time.
DMCA, Hollings, Palladium. What might have sounded like paranoia is now common sense.