Nine out of ten employees knowingly ignore cyber safety policies

http://www.welivesecurity.com/2013/...oyees-knowingly-ignore-cyber-safety-policies/

 

I'm not surprised when you look at how lax home users are with computer security and then place them in an environment where IT "seemly overreacts" to employees playing solitaire, or surfing the web. It shouldn't come as a surprise when they blow them off in defiance or are so computer illiterate spear-phishing and plug-&-play attacks proliferate organizations. Think this is bad, the first company I worked for hired a secretary that did not feel comfortable using computers. She would hand write down everything and input some of it into select programs. The paper records often included sensitive information about clients that she crumpled up and threw away carefree in her waste bin. Should have seen her explode whenever an employee brought up the matter. It wasn't within our job descriptions, so no one pushed the issue further. Also she was on better terms with the employer and no one wanted to risk it.