• rmuk@feddit.uk
    link
    fedilink
    English
    arrow-up
    52
    ·
    10 months ago

    Outsourced IT provider here:

    90% of businesses have basically zero IT security. Leaked passwords in regular use and no process or verification for password resets. As soon as someone complains that 2FA or password rotation is difficult it gets dropped. Virtually all company data is stored on USB keys, plaintext hard drives and on staff’s personal home devices.

    The reason they’re not constantly having their data stolen is because no-one cares about the companies either.

    • Aux@lemmy.world
      link
      fedilink
      arrow-up
      4
      ·
      10 months ago

      Password rotation is very insecure. No one should be doing that. I also hate when companies set maximum length for a password, like 12-16 characters. Bitch, my 32 character password is much more secure!

    • Supertramper@feddit.de
      link
      fedilink
      arrow-up
      3
      ·
      10 months ago

      I believe Microsoft’s 365 platform helps a lot in that matter. Even without any security strategy or custom configuration M365 offers a better security level than those businesses could ever reach themselves.

    • uriel238@lemmy.blahaj.zone
      link
      fedilink
      arrow-up
      0
      arrow-down
      4
      ·
      10 months ago

      Which might explain why medium sized companies that are not completely clean-nosed are happy to run Windows 10 with all its spyware elements running unregulated.

      It’s also terrible in the government sector, which is why the NSA’s huge database on US internet traffic is accessible to rivals like Russia, Iran and China.