Securing your intranet requires more than just technology. In fact, employees represent your highest risk and point of breach.

CMPnet.com’s David Joachim covers the top 10 worst security practices in Lethal lapses:

1. If you find a security hole, buy a product to fix it.
2. Ignore the human element.
3. "Full speed ahead and damn the torpedoes" is our motto.
4. To run a tight ship, take an authoritarian approach.
5. Make access privileges an all or nothing proposition.
6. Treat all data as equal.
7. Back up everything, every night.
8. Perform audits and penetration tests infrequently, and in-house.
9. Endpoints for everyone.
10. Make sure security is highly visible, even intrusive.

“Most of these observations are about process and behavior rather than technology,” writes Joachim “That's not to say technology isn't important. But security pros generally have a mastery of bits and bytes and how to protect them. What's often missing is a sense of the big picture and how each separate alteration to the network affects the whole.”

RELATED READING:

Assessing your security risk

Best practices: securing your intranet

Email and intranet are biggest wireless threats

Securing your intranet from the inside