An interesting story ran late last week in Computerworld "Smokers may be the weak IT security link". It describes how a penetration tester in the UK used a door that smokers used for a cigarette break to enter the enterprise without any identification and then made it into a meeting room and logged onto the enterprise's VOIP network.
This is another example of where the weakest link in the security chain, often humans and human nature, can be used to bypass expensive security infrastructure. Bottom line: Train employees continuously and also have layers of stronger identity authentication when the networks are successfully penetrated.
Guy
www.authenticationworld.com
guy.huntington@authenticationworld.com
del.icio.us