{"id":2349,"date":"2011-08-24T07:00:30","date_gmt":"2011-08-24T15:00:30","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=2349"},"modified":"2011-08-24T07:00:30","modified_gmt":"2011-08-24T15:00:30","slug":"security-people-continue-to-be-the-weakest-link","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-people-continue-to-be-the-weakest-link\/","title":{"rendered":"Security: People Continue to be the Weakest Link"},"content":{"rendered":"

A recent spate of hackings and breakins, including highly secure organizations like the Pentagon<\/a>, EMC’s RSA<\/a> and Lockheed Martin<\/a>, has clearly shown that every organization is vulnerable. \u00a0Often it’s not the technology, the encryption and authentication methods or the firewalls which are the problem. \u00a0While having security technologies in place is essential for cyber-protection, but more often than not, security lapses are the result of human error.<\/p>\n

Much of the problem is that users are often not properly\u00a0trained on security. \u00a0 A survey by certificate management company Venifi<\/a> found that few companies do regular training with their employees on security best practices. \u00a0In fact, the report found that few companies were following five of the best practices for ensuring secure operations:<\/p>\n

    \n
  1. Perform quarterly security training with employees. \u00a0[77 percent of companies are not doing this.]<\/li>\n
  2. Encrypt all cloud data and cloud transactions. \u00a0[64 percent of companies are not doing this.]<\/li>\n
  3. Use encryption throughout the organization. \u00a0[10 percent of companies are not doing this.]<\/li>\n
  4. Have a business continuity plan in place should security certificates be compromised. \u00a0[55 percent of companies are not doing this.]<\/li>\n
  5. Rotate SSH keys every 12 months. \u00a0[82 percent of companies are not doing this.]<\/li>\n<\/ol>\n

    Rich Mogull<\/a>, security editor at TidBITS and former Gartner research vice president, said<\/a> that \u00a0“People, by nature, are unpredictable and susceptible to manipulation and persuasion. Studies show that humans have certain behavioral tendencies that can be exploited with careful manipulation. \u00a0Many of the most-damaging security penetrations are, and will continue to be, due to social engineering, not electronic hacking or cracking.”.<\/p>\n

    Security Editor at TidBITS<\/div>\n

    “People, by nature, are unpredictable and susceptible to manipulation and persuasion. Studies show that humans have certain behavioural tendencies that can be exploited with careful manipulation.
    \n“Many of the most-damaging security penetrations are, and will continue to be, due to social engineering, not electronic hacking or cracking,” said Mogull.
    \nSecurity Editor at TidBITS<\/p>\n

    \"Digg<\/a><\/div>
    \"Reddit<\/a><\/div>
    \"Stumble<\/a><\/div>
    \"Buzz<\/a><\/div>
    \"Vote<\/a><\/div>
    \"Share<\/a><\/div>
    \"Bookmark<\/a><\/div>
    \"Kick<\/a><\/div>
    \"Shout<\/a><\/div>
    \"Share<\/a><\/div>
    \"Bookmark<\/a><\/div>
    \"Post<\/a><\/div>
    \"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

    A recent spate of hackings and breakins, including highly secure organizations like the Pentagon, EMC’s RSA and Lockheed Martin, has clearly shown that every organization is vulnerable. \u00a0Often it’s not the technology, the encryption and authentication methods or the firewalls…<\/span><\/p>\n

    Read more ›<\/a><\/div>\n

    <\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-2349","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/2349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=2349"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/2349\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=2349"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=2349"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=2349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}