Looking around at how things are done at my new company, it’s pretty easy for me to find security problems lurking virtually everywhere.

For example, the first thing I noticed was that my proximity access badge was blank: no picture, no name, no recognizable icon to indicate that I’m an employee. I mentioned this to the people in human resources, but the concept of a personalized access badge seemed foreign to them. So I told them about something that had happened years ago at another company that used blank access badges. An intruder got hold of one, then, claiming he was a new IT desktop support staffer, came along and walked out with all the unsecured laptops he could carry. The stolen badge, looking like all the other badges issued at that company, told the people he encountered as he gathered up his haul absolutely nothing.

To read this article in full or to leave a comment, please click here

…