Security Risks and Concerns

There are real risks and concerns when the wrong users have access to information as a result of inefficient or unverified user access controls.

Organisations naturally prefer to keep breaches of inappropriate staff access private but some examples do come to light.

Real World Examples

Below are some excerpts from an article published by SC Magazine: "The financial risks of uncontrolled user access".

A network manager, sacked by a manufacturer of measurement and control devices used by the US Navy and NASA, was able to detonate a software 'time bomb' in the company's network, destroying the programmes that ran its manufacturing machines. The malicious code was responsible for $10 million in loses, 80 redundancies and the loss of several customers.

There's the computer technician who, having been fired from a temporary position at one of New York's prominent publishing houses, was able to erase all the data on five of the company's eight servers. The company was forced to shut down its operation for two days and lost more than $100,000.

Best Practice

  • Employer / employee communication
  • Management (information owner / creator) Controls Information Access
  • Minimal Lead Time
  • Reduced Manual Input
  • Minimise Security Risks
  • Diminished Costs

Using Validated xhtmlUsing Validated CSS