With all things being electronic today and us having to manage a hundred different computer accounts between home and work, here’s one of those ‘haven’t thought of before’ security issues that can come back and bite hard when the opportunity arises.
First, have one set of common passwords you use for business purposes…You know – the account password(s) you use on the network, email, local computer, PGP, your HR portal – you name it. Sure, in an ideal world, we’d have separate passwords for every single account. That’s not reality. All of us have re-used the same password on different systems….at least at some point.
Second, have another set of common passwords you use at home for things like Amazon.com, eBay, your personal email account, online banking, etc. When you’re at home, at friend’s houses, or just goofing off on vacation, you’re likely to be using less secure systems and communications channels which increases the chances of password exposure.
Sure, it may be convenient to co-mingle work and personal passwords, but in the end it will only serve to increase the odds for an incident and exposure where you don’t need it – either professionally or personally.
Most importantly – make it policy (I know…it’d be next to impossible to enforce – but still) and then get the word out to your users. They’re you’re biggest vulnerability in all of this after all.
“A business associate referred our company to Principle Logic when we were seeking a resource to perform vulnerability /penetration testing for our external and internal networks. We found Kevin Beaver to be professional, well informed, and easy to work with. His testing did not disrupt our networks, and his progress updates were timely.
His final report was very thorough and included security recommendations for our network environment. The executive leadership was so impressed with Kevin’s security expertise, they have extended their agreement to continue to perform periodic testing. We highly recommend Kevin Beaver and Principle Logic as a resource for network security testing.”