When Employees Use Software That IT Hasn’t Approved

Re:When Employees Use Software That IT Hasn’t Approved by alistairSH on Wednesday June 12, 2019 @11:08AM (#20165368)

I find most “IT security policies” that hamper developers to be mostly security theatre. No matter how many policies they put in place, since they aren’t developers, one junior developer can write...

IT policies at large corporations aren't implemented for developers (only). They're implemented for everybody. For every developer, there is a salesperson, admin, manager, or HRBP who will do things they might not fully understand to be "bad".

I came into the industry in the late-90s and still remember the chaos that the ILOVEYOU and Anna Kournikova style viruses caused in corporate offices. Non-technical users didn't know that Windows hid file extensions by default. They didn't think that opening a picture could start a shitstorm the brought the corporate network to its knees. Fun times.

[ Parent | on HN ]

Re:When Employees Use Software That IT Hasn’t Approved by scarface74 on Wednesday June 12, 2019 @11:21AM (#20165519)

Yes. I remember ILOVEYOU too. It also confirms my point.

- It spread by reading the person’s contact information which doesn’t require administrator access.

- It also corrupted the user’s files and didn’t require administrator access for that either.

[ Parent | on HN ]