What kind of fallout to expect - Suggestions
Director just sent a unsecure email to all staff to send in the clear the username and passwords for any accounts. Suggestions? She is asking me to keep their passwords. I informed management that IT...
View ArticleWhat kind of fallout to expect - Suggestions
I would start by asking for business reason behind this. This will help to formulate your response.
View ArticleWhat kind of fallout to expect - Suggestions
Who is the Director? Director of what? Do they even have the power to make this kind of decision?First, I'd explain the dangers of this move, try to figure out what they're really trying to accomplish,...
View ArticleWhat kind of fallout to expect - Suggestions
BAD MOJO! That's a seriously bad idea. Any sort of audit firm will chew you out for that sorta of incompetence. Have her put it in writing and that your butt isn't on the line for it. Seriously. CYA!
View ArticleWhat kind of fallout to expect - Suggestions
Got the word they sent out a follow up email to have people write it down for HR to collect. I instructed HR to do whatever they need to with the information and in 48 hours shred the doc and we need...
View ArticleWhat kind of fallout to expect - Suggestions
Tell them to hold on until you have a security heart to heart with management. The director needs to understand that doing this means ALL responsibility of every staffer is compromised and that...
View ArticleWhat kind of fallout to expect - Suggestions
I agree with my fellow Spiceheads... find out why, document it, CYA, explain why it is a bad idea...Is it for all employees or just IT, which is only slightly more reasonable...Can not really...
View ArticleWhat kind of fallout to expect - Suggestions
I publish my list to a private doc. Its behind a webservice login which is also printed to and left in my office. What was requested was for all services. Not including IT.
View ArticleWhat kind of fallout to expect - Suggestions
KrisLeslie wrote:Got the word they sent out a follow up email to have people write it down for HR to collect. I instructed HR to do whatever they need to with the information and in 48 hours shred the...
View ArticleWhat kind of fallout to expect - Suggestions
So far we have minimized it, but I'm definitely anxious for those passwords to get reset.
View ArticleWhat kind of fallout to expect - Suggestions
KrisLeslie wrote:So far we have minimized it, but I'm definitely anxious for those passwords to get reset.Once you TELL everyone to reset them and make sure that they got the message then it is their...
View ArticleWhat kind of fallout to expect - Suggestions
Scott is on target.In security circles it can be called the "C.I.A. of security". Sending/Knowing the passwords breaks it—C, ConfidentialityI, IntegrityA, AvailabilitySee...
View ArticleWhat kind of fallout to expect - Suggestions
KrisLeslie wrote:So far we have minimized it, but I'm definitely anxious for those passwords to get reset.You can force password expiry. Tweak the number of remembered passwords and go from there.
View ArticleWhat kind of fallout to expect - Suggestions
That is an excellent article I'm going to read it today.
View Article
