Passwords and the Human Factor

Passwords have a strange dual nature. The stronger and safer the password the more likely it will be undermined by human weakness.

It is widely known that passwords are the most common means of access control. It is also common knowledge that passwords are the easiest way to compromise a system. Passwords have two basic functions. First, they allow initial entry to a system. Next, after access, they grant permission to various levels of information. This access can range from public data to restricted trade secrets and pending patents.

The best passwords are a lengthy and complex mix of upper and lower case letters, numbers and symbols. The tendency for people when using these formats is to write them down, store them on a hand held device, etc. thus destroying the integrity of the password.

The integrity of passwords can be circumvented through "Human Engineering." People can unwittingly make grave errors of judgment in situations that they may view as harmless or even helpful. For example, a password is shared with a forgetful employee and a system can be compromised. In more ominous cases, a con artist or hacker can phone a naïve employee and present themselves as senior executives or help desk personnel and obtain that persons password. People have also been duped by callers claiming emergencies, cajoling or even threatening the employees job if a password is not provided.

These human lapses can be addressed through employee training and written policies that provide solid guidance and procedures in these circumstances. Training in information security, including password protocols, should be mandatory for every employee of the enterprise. Management support of this training and the security policy is critical to its success. To be effective, training should be repetitive with quarterly reviews of the company policy. There can also be frequent reminders, such as banners, about password security that appear during logons.

Management must not only support security measures, they must also provide a written and enforced policy statement. These written policies should be developed with assistance from the I.T. department as well as the human resource and legal departments. Written policies should be a part of the employee's introduction to the company and should be reviewed at least twice a year. It is also critical that the employee sign off on the document indicating that they received, read, and understood its contents. Firms that ignore these practices do so at their own risk.

Enforcement is an important partner to training. A policy that is not enforced is far worse than no policy at all. In fact, haphazard enforcement or lack of enforcement can increase a company's liability in many legal actions. To work, a policy must have "teeth". There should be a range of consequences for lapses whether it is a single event or multiple or flagrant incidents. This can range from a verbal warning all the way to termination.

In summary, passwords can be kept more secure by recognizing the human factor. Through management initiative, communication and training, as well as written and enforced policies and procedures, companies can have more control over their information assets and keep their clients and partners much safer.

About The Author

Terrence F. Doheny

President, Beyond If Solutions,LLC

www.beyondifsolutions.com

terry@beyondifsolutions.com

---

Google News Updated : Thu, 24 Jul 2008 18:51:58 GMT Arizona reports first West Nile death of 2008 - Bizjournals.com TheMedGuru Arizona reports first West Nile death of 2008 Bizjournals.com - 1 hour ago Arizona has reported its first death from the West Nile virus this year. It also is the first West Nile death in the US this year. First bird in Nassau tests positive for West Nile Newsday Fighting West Nile Alexandria Gazette Packet KTAR.com - AZFamily - FOXBusiness - Boston Globe all 231 news articles Publ.Date : Thu, 24 Jul 2008 17:45:00 GMT FOX News Poll: No Bounce for Obama From Overseas Trip - FOXNews ABC News FOX News Poll: No Bounce for Obama From Overseas Trip FOXNews - 27 minutes ago By Dana Blanton The significant news coverage Barack Obama is receiving on his foreign trip has not translated into a bounce in his numbers, a just-released FOX News poll shows. Wanted: 2 million poll workers for November The Associated Press Comment by Leonard Steinhorn Prof, School of Communication, American University New York Times - CNN - United Press International - PolitickerCA all 689 news articles Publ.Date : Thu, 24 Jul 2008 18:24:50 GMT Ford Has $8.7 Billion Loss, Shifts Away From Trucks (Update4) - Bloomberg Ford Has $8.7 Billion Loss, Shifts Away From Trucks (Update4) Bloomberg - 44 minutes ago By Bill Koenig July 24 (Bloomberg) -- Ford Motor Co., the world's third- biggest automaker, posted a record quarterly loss of $8.7 billion and accelerated a conversion to fuel-efficient vehicles to wean itself from money-losing trucks. Ford's Worst Quarter Ever BusinessWeek Ford Posts Loss of $8.7 Billion on Asset Woes New York Times Forbes - CNNMoney.com - Reuters - Los Angeles Times all 1,181 news articles Publ.Date : Thu, 24 Jul 2008 18:07:48 GMT Health Buzz: A $500 million Antismoking Campaign and Other Health News - U.S. News & World Report BBC News Health Buzz: A $500 million Antismoking Campaign and Other Health News U.S. News & World Report - 3 hours ago Billionaires Bill Gates and New York City Mayor Michael R. Bloomberg announced yesterday that they'll contribute a combined $500 million to a worldwide antismoking campaign, the New York Times reports. Video: Gates, Bloomberg Pool Riches to Fight Smoking AssociatedPress The $500 million war on smoking Minneapolis Star Tribune Reuters - Newsday - Economist - California Healthline all 639 news articles Publ.Date : Thu, 24 Jul 2008 15:43:30 GMT Swimmer’s Positive Test Puts Olympic Berth Doubt - New York Times New York Times Swimmer’s Positive Test Puts Olympic Berth Doubt New York Times - 30 minutes ago By KAREN CROUSE The swimmer Jessica Hardy has not been penalized for a doping offense despite published reports that she tested positive for a banned substance. Video: Source:Hardy Tests Positive for Banned Substance AssociatedPress Sequence doesn't make Sense Los Angeles Times Gay Wired - Palo Alto Online - The Wenatchee World Online - The Associated Press all 750 news articles Publ.Date : Thu, 24 Jul 2008 18:21:30 GMT Would UN Security Council Postpone Any Prosecution of Sudanese Leader? - Voice of America Voice of America Would UN Security Council Postpone Any Prosecution of Sudanese Leader? Voice of America - 1 hour ago By Joe De Capua As the International Criminal Court (ICC) considers whether to issue arrest warrants for Sudanese President al-Bashir, some are calling on the UN Security Council to block the action. Sudan's Beshir pledges peace as he leaves Darfur AFP Jordan's lower house opposes charges against Sudanese president Xinhua Hindu - Los Angeles Times - istockAnalyst.com - AllAfrica.com all 1,823 news articles Publ.Date : Thu, 24 Jul 2008 17:30:10 GMT South Texas begins cleanup after Hurricane Dolly - The Associated Press Calgary Herald South Texas begins cleanup after Hurricane Dolly The Associated Press - 30 minutes ago HARLINGEN, Texas (AP) - Residents across south Texas slogged through knee-deep muddy waters, tiptoed around downed power lines and dug through debris Thursday, but were thankful that Hurricane Dolly didn't pack the wallop they had feared. Video: Tropical Storm Dolly Causes Flood Worries AssociatedPress Dolly weakens, pushes inland USA Today East Valley Tribune - AHN - KIII TV3 - KVIA all 7,399 news articles Publ.Date : Thu, 24 Jul 2008 18:21:14 GMT Make Money Online RSS Software

PARLOT::Ebooks, Scripts, Websites, and more...

Adsense websites

Is Digital Camera Technology Making Film Obsolete?

Perhaps not yet, but the handwriting might be on the... Read More

Deleting and Destroying Data Forever

Peoples' private information needs to stay private, even after it... Read More

How to Buy a Plasma Television Set

Most people think that all you have to do to... Read More

Image Conversion In Computers

JPEG, GIFF/JIFF, BMP, and TIFF are the most commonly used... Read More

Anti-Skip Protection on Mp3 Players

There have been some questions on anti-skip protection on mp3... Read More

The Advantages of Portable MP3 Players

With their solid-state technology, compact size, and abundant memory, portable... Read More

EDTV vs HDTV

Confused by EDTV vs HDTV? We don't blame you. The... Read More

Home Video? Bring it On

So you got yourself a digital camcorder. If you want... Read More

Cisco CCNA / CCNP Certification: OSPF ASBRs Explained And Illustrated

When I first started studying for my CCNP, some of... Read More

Tips For Getting Technical Support Help Online

Sometimes your PC will start acting strange for no apparent... Read More

How to Protect your PC from Spyware in the Cyber Age

Wouldn't you be shocked to find that your personal sensitive... Read More

Computer Performance Tips

Introduction In this article I will clearly spell out the... Read More

Cisco Certification: What To Expect On Exam Day

Cisco Certification: Taking Your First Certification ExamYou've studied hard; you've... Read More

Connect Your IPAQ to Linux

Choose Not To ConformPalm pilots and pdas are constantly growing... Read More

PC Owners - The Largest Criminal Gang Ever?

The year is 1981. IBM has just released the Personal... Read More

Can Movie Theatres Compete with Home HD TV in the Future?

The battle is heating up for market share, home movie... Read More

Setting File Permissions On A Unix Server

File permissions are one of the strengths that the Unix... Read More

What Exactly are Screensavers? - part II

Here are some tips on how to use screensavers:First of... Read More

Refurbished Computers on the Internet

What is a Refurbished Computer?Refurbished Computers. Remanufactured Computers. Reconditioned Computers.... Read More

Advantages and Guidelines of Automated Testing

"Automated Testing" is automating the manual testing process currently in... Read More

Reliable File and Folder Sharing in Windows Xp

This tip is on sharing files and folders on a... Read More

Your Affiliate Business - Peripherals, Software, Computers

I have always been interested in computers, but in the... Read More

Occupational Therapy and PDAs

Occupational Therapy Made EasierMedical downloads for the pda have improved... Read More

Why There Are Color Differences in Printing from Your PC

This article describes the basic properties of color, what the... Read More

Digital Cameras: Hot Gear with the Coolest Features!

Cameras: still known for taking pictures but assumed as digital... Read More