Securing the human factor - Seguridad Mania.com - España y América Latina

Forget about attacks through your firewall and perimeter defences. What about the guy who phones up the IT helpdesk, pretends to be a senior manager and gains access to your information that way; this is social engineering! Or send emails, using phishing techniques to employees, fooling them into giving away their credentials. Most security professionals agree that people are your weakest link - so why do we continue to ignore this area of security? Or at best give it lip service through half-hearted security awareness programmes? You can think about human security in the same way as you would secure a web server. Develop a thorough understanding of human vulnerabilities, with an appropriate balance between systemic improvements to shield human weaknesses, and effectively targeted training and awareness building.