<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:s="http://www.techrepublic.com/search" xmlns:dc="http://purl.org/dc/elements/1.1/"  xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
    <title><![CDATA[Discussion on Top Security Mistakes ]]></title>
    <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859]]></link>
    <atom:link rel="hub" type="application/rss+xml" href="http://pubsubhubbub.appspot.com/" />
    <atom:link rel="self" type="application/rss+xml" href="http://www.techrepublic.com/forum/discussions/102-220859/rss" />

    <description><![CDATA[]]></description>
    <language>en-us</language>
    <lastBuildDate>2013-05-26T02:23:35-07:00</lastBuildDate>
             

    <item>
        <title><![CDATA[RE: Top Security Mistakes]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2667995]]></link>
        <description><![CDATA[hello,its really a good article..it helped me lot.thank you.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2667995]]></guid>
        <dc:creator><![CDATA[ami_261@...]]></dc:creator>
        <pubDate>Sat, 27 Dec 2008 05:29:56 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[RE: Top Security Mistakes]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2436505]]></link>
        <description><![CDATA[This is a superb list on Information Security Management. The only thing missing of course is something about document security. Some people still use paper. Check them out, works for us.http://www.fellowes.com/Fellowes/site/workspace/workspace_article_identity_8.aspx]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2436505]]></guid>
        <dc:creator><![CDATA[thomasstevens222@...]]></dc:creator>
        <pubDate>Mon, 25 Feb 2008 11:03:09 -0800</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Absolutely]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2245649]]></link>
        <description><![CDATA[This is a matter of looking out for yourself as much as your company. Leave a machine open, and someone walks up and sends a email - from your account - telling off management or having a really bad attachment. Will you avoid firing long enough to prove it wasn't you? The potential cost of leaving your system open and unattended is just too great.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2245649]]></guid>
        <dc:creator><![CDATA[vbnomad@...]]></dc:creator>
        <pubDate>Wed, 30 May 2007 10:50:06 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[What lesson are you not learning?]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2231035]]></link>
        <description><![CDATA[Experience isn't everything, but, you have a situation where security is minimal and yet the lab/system continues to work. The lesson you are not learning here is that the security risk is far less real than the 'security people' make out. That said, I agree, better to be safe than sorry, so close the lab till the professor toes the line.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2231035]]></guid>
        <dc:creator><![CDATA[andrew@...]]></dc:creator>
        <pubDate>Thu, 10 May 2007 04:46:34 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[better missing something]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230842]]></link>
        <description><![CDATA[http://thewaysecuritylooks.blogspot.com/]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230842]]></guid>
        <dc:creator><![CDATA[mailbymarq@...]]></dc:creator>
        <pubDate>Wed, 09 May 2007 21:38:03 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Just a note]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230690]]></link>
        <description><![CDATA[Might want to also check with Merriam Webster (or a spell checker).  That could be a good habit (not habbit).  You might also have a defective keyboard, so you might want to test the repeat values?  Let's all be proactive and look at biometric security.  Passwords are only as good as those that use them.  Security is extremely important and should be emphazied to every person on a corporate network.  Administrators should monitor server and network activity for violations and or threats.  However, we don't quite live in a perfect world.  Therefore other &quot;business needs&quot; often take priority over the business model.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230690]]></guid>
        <dc:creator><![CDATA[dmaster]]></dc:creator>
        <pubDate>Wed, 09 May 2007 15:50:10 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Awesome Four]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230630]]></link>
        <description><![CDATA[The very true and professional points.All are valid. For me following four are obvious as I have the direct experience with these.1. Trusting people: The biggest threat to your IT security is ALWAYS the trusted employee.(If the trusted person has done something wrong, he will try to mend it without your knowledge and that may sometimes take to bigger disaster)4. Incorrectly prioritizing the protection of specific assets: Few of us have the resources to protect everything completely. In the real world, you need to know what the most important things are to your company so you can protect those assets the most. One size does NOT fit all. (Prioritization is very much important where deadlines and the stipulated timeframe is key to a project)7. Not properly managing passwords: Make them long and easy to remember -? initial letters of words in a favorite quotation are often a good choice; final letters of those words are even better.(Passwords can be hacked easily if it is very small and guessable)8. Supplying help desk support without thoroughly authenticating callers: Social engineering is still a serious threat.(Some helpdesk personnel do take advantage of the situation )]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230630]]></guid>
        <dc:creator><![CDATA[nayeem.kn@...]]></dc:creator>
        <pubDate>Wed, 09 May 2007 14:13:59 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[This is a great point.]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230587]]></link>
        <description><![CDATA[I was recently at a security seminar that the speaker focused on this issue for quite awhile.  If you think about it all the network security in the world isn't going to help you if your information assets are walking out the door.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230587]]></guid>
        <dc:creator><![CDATA[levi.rogers@...]]></dc:creator>
        <pubDate>Wed, 09 May 2007 13:49:02 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[A better response might be...]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230582]]></link>
        <description><![CDATA[...perhaps there is a need to replace the operating system! (With kudos to the Linus aficionados here)]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230582]]></guid>
        <dc:creator><![CDATA[RknRlKid]]></dc:creator>
        <pubDate>Wed, 09 May 2007 13:35:20 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Lock It  Every Time]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230554]]></link>
        <description><![CDATA[The same principle applies to anyone who walks away from their machine without locking it up.  It's way too easy for someone to walk up and have instant access, and in some cases the ability to grant themselves elevated access (and audit logs aren't any help to track this one down). I have found that showing users that they can quickly lock the machine using the windows key + 'L' shortcut.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230554]]></guid>
        <dc:creator><![CDATA[Clint Hartner]]></dc:creator>
        <pubDate>Wed, 09 May 2007 13:13:06 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Your valuable data]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230589]]></link>
        <description><![CDATA[So you lock down all access points to your network and then what do you do.You produce back up tapes, with all the important data on them, data that is important to you.So you send these off to an outside facility, the truck driver doesn't care about your data, its just a parcel to him. What do you do if the tape is lost, or borrowed (to extract your valuable data).Where is your data now?Time to look at data security in a holistic way.How many of you encrypt your backups?There are some white papers on this issue at http://www.theq3.com]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2230589]]></guid>
        <dc:creator><![CDATA[d.pladgeman@...]]></dc:creator>
        <pubDate>Wed, 09 May 2007 12:47:56 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[A different issue]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2228253]]></link>
        <description><![CDATA[See to me the issue appears to be:&quot;The PCs are mostly old&quot;If performance is suffering because you cannot otherwise protect your machines, perhaps there is a need to upgrade/replace those PCs.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2228253]]></guid>
        <dc:creator><![CDATA[arran.price@...]]></dc:creator>
        <pubDate>Sun, 06 May 2007 20:46:12 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[It's those miraculous saves that hurts our credibility]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2226230]]></link>
        <description><![CDATA[All the talk about best practices and security measures gets watered down when &quot;we're doing just fine without them.&quot; Of course when it stops being just fine it's IT's fault, and instead of implementing system-level security we should have wasted man-hours on something like walking to each computer, manually testing every file in a backup, etc.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2226230]]></guid>
        <dc:creator><![CDATA[zyphlar]]></dc:creator>
        <pubDate>Thu, 03 May 2007 09:28:22 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Sure but]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2226224]]></link>
        <description><![CDATA[Who's the first person you'll blame when you catch a worm and lose weeks of productivity, all because the virus scanner was disabled?You frequently can't have the best of both worlds, and I ran into this same problem at my job: everyone complained of slow computing when we installed AV software, so I was forced to disable on-access scanning. In addition, some people insist on using software that requires local admin privileges. Now there's a worm loose and guess who gets the blame and wasted man-hours? It certainly isn't mister road warrior who downloaded Naked Dancing Pig screensavers.You might be saying I need perimeter AV scanning and IDS AV scanning, but I either already have it or it's too costly for my manager's tastes.My point is, in an organization that wants to have the best of all worlds, security frequently gets the squeeze and the eventual result isn't good for anyone.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2226224]]></guid>
        <dc:creator><![CDATA[zyphlar]]></dc:creator>
        <pubDate>Thu, 03 May 2007 09:20:33 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[log off issue]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2225681]]></link>
        <description><![CDATA[One way I train users that &quot;forget&quot; to log off at night is to do it for them.In the morning they find their desktop a horrible color and all the icons in either a smiley face or frowny face depending if they have done it before.Then they get to reset their password.  Again and again and again until they learn to log off correctly.  I have had some people take a week to 10 days to figure it out.  The worse offenders are then locked out and an e-mail sent to the supervisor reporting why.  Let them deal with the issue.  Even now, I occasionally see one of the bad desktops still in use years later.  Maybe they liked after all.  Maybe the user policy actually applied preventing desktop changes...  ]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2225681]]></guid>
        <dc:creator><![CDATA[tundraroamer]]></dc:creator>
        <pubDate>Wed, 02 May 2007 17:51:38 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Education is great, but...]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2225486]]></link>
        <description><![CDATA[experience on my campus is that inevitably a percentage of those 'educated' ignore the lesson and open those emails and attachments, as well as continue to run Limewire and the like.  Furthermore, in at least one of the student computer labs, the head of that department refuses to maintain data on a network drive, doesn't enforce any backup policies, allows the use of Limewire and the like by the students, etc...Why she still has her job, and why our network is still highly functional I often wonder.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2225486]]></guid>
        <dc:creator><![CDATA[boxfiddler]]></dc:creator>
        <pubDate>Wed, 02 May 2007 13:18:32 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[an item to add]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2225306]]></link>
        <description><![CDATA[-Failure to make security a 'habbit'.Our company doesn't go in for punishments or threats, it will just inconvenience you if you violate security policy.Leave confidential docuements out, they get confiscated and a note is left to pick them up at security.ditto that for unsecured laptops.pretty soon people get into the habbit as they learn that the inconvenience of following the policies aren't nearly as bad as not following the policies.You could also add &quot;failing to stress the importance of security.  If you get the &quot;Yeah, yeah&quot; response, they're not taking it seriously.Another place I worked would periodically try to hack your passwords.If they succeeded, you would get an email detailing how long it took, and that your password had been reset.  You would then have to go through a somewhat painful process to reset it again.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2225306]]></guid>
        <dc:creator><![CDATA[Locrian_Lyric]]></dc:creator>
        <pubDate>Wed, 02 May 2007 09:39:19 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Education?]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2225304]]></link>
        <description><![CDATA[I believe that one of the items that was missed on the list and should really be at the top is end user training.  Failing to train the users on security measures, such as, ?Why you shouldn?t open email from unknown senders? or simply ?What is a virus and how to prevent them??  Through education you can gain support from your user community for your security measures.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2225304]]></guid>
        <dc:creator><![CDATA[dlittle@...]]></dc:creator>
        <pubDate>Wed, 02 May 2007 09:35:58 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Couldn't agree more]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2224884]]></link>
        <description><![CDATA[Of course, security is important, but it isn't an end in itself.  We have a pocket Hitler as our security manager, and productivity suffers hugely.  Not just because of what you can't do, but also impact on execution time by havng AV software running almost permanently on every PC.  The PCs are mostly old, and performance suffers, but it doesn't matter because everything is 'secure'.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2224884]]></guid>
        <dc:creator><![CDATA[blackburne99]]></dc:creator>
        <pubDate>Wed, 02 May 2007 01:15:49 -0700</pubDate>
    </item>
             

    <item>
        <title><![CDATA[Management Hacks]]></title>
        <link><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2224313]]></link>
        <description><![CDATA[You briefly touched on management.  One of my biggest threats has been failure by management to keep up with or even close to newer software versions.  While I understand that our current version NT and related software works just fine, I can't fully patch it.  Management complains when I start necking down what users can do to lessen the threat that I can't fully defend against.  When bad things happen, I can only say &quot;I told you so&quot; so many times.So, management can hack your system by hamstringing it.]]></description>
        <guid><![CDATA[http://www.techrepublic.com/forum/discussions/102-220859-2224313]]></guid>
        <dc:creator><![CDATA[tundraroamer]]></dc:creator>
        <pubDate>Tue, 01 May 2007 09:20:02 -0700</pubDate>
    </item>
    </channel>
</rss>

