E-Commerce Passwords - Data Breach Inevitable?
Just how confident are you that your e-commerce enterprise is secure?
Not very, at least according to a recent survey conducted by Lieberman Software. The research revealed that more than 70% of IT security professionals would not be willing to bet $100 of their own money that their companies will not suffer a data breach in the next six months.
The study also revealed that one-third of organizations do not have a policy making it compulsory to change default passwords when deploying new hardware, applications and network appliances to the corporate network.
"These figures highlight the fact that IT security professionals realize that most organizations are woefully unprotected against cyber attacks," said Philip Lieberman, President and CEO of Lieberman Software, commenting on the research.
The survey revealed that many in IT groups are not changing default passwords when deploying new systems - something which should be a standard practice as default privileged passwords are, in a sense, hidden backdoors onto systems that are deployed on a network. Anyone with malicious intent, according to Lieberman, can attempt to use default credentials to gain anonymous access to systems and applications throughout the enterprise.
"IT departments that do not have a solution in place to automatically detect, flag and change default privileged passwords on newly deployed systems are neglecting a very common security hole."