ITPRO

Printed from www.itpro.co.uk

Register to receive our regular email newsletter at http://www.itpro.co.uk/reg/register.

The newsletter contains links to our latest IT news, product reviews, features and how-to guides, plus special offers and competitions.

Skip to navigation

    IT staff admit to looking at confidential data.

New survey reveals extent of IT snooping on private data held by companies.

By Rene Millman, 29 May 2007 at 15:26

A third of IT staff look through private files, wage data, personal emails, and HR details, according to a new survey.

Access to special administrative passwords means that IT department workers can rifle through confidential information with privileged and anonymous access to virtually any system within an organisation, the survey said.

One respondent to the survey of 200 IT professionals said that if people had the kind of access to files they had they would do the same. "Why does it surprise you that so many of us snoop around your files, wouldn't YOU if you had secret access to anything you can get your hands on," they said.

The survey also found that more than half of IT professional keep their administrator passwords on a Post-It note, in spite of all the education and reminders to do differently.

One administrator told the survey that it was easy for an employee to update the personal password to their laptop, "but to change the administrator password on that same machine? It would take days for IT to do them all by hand. In the end, we just pick one password for all the systems and write it down."

The study, carried out by IT security company Cyber-Ark, found that 20 per cent of organisations admitted that they rarely changed their administrative passwords with seven per cent saying they never change administrative passwords. Eight per cent of IT professionals revealed that the manufacturers default admin password on critical systems had never been changed, which remains the most common way for hackers to break into corporate networks.

Calum Macleod, European director at Cyber-Ark said that it was surprising to find out how rife snooping the workplace was.

"Companies need to wake up to the fact that if they don't introduce layers of security, tighten up who has access to vital information, and manage and control privileged passwords, then snooping, sabotage and hacking will continue to be rife," he said.

Email to a friend

Print this page

< Previous   Security : News Next >

Be the first to comment on this article

You need to Login or Register to comment.

    You may also like...

 Sponsored Links

advertisement

    You may also like...

advertisement

    Register for IT PRO

You'll get exclusive member benefits including free whitepapers, downloads, Webinars and weekly newsletters full of the latest IT PRO news, reviews, insight and expertise.

Sponsored Links
Advertisement