Single sign on (SSO): fingerprint biometrics must replace passwords
Single sign on (SSO): fingerprint biometrics must replace passwords
Passwords just aren't working in Identity Management (IdM). American systems management firm, Quest Software, commissioned a 2008 study of 150 diverse, global organisations which showed that 52% of them require employees to use nothing more than a password to access critical data. And a 2009 Cyber-Ark survey hammers home how much of joke passwords really are.
The Quest study also found that:
• 88% of enterprise users have multiple work-related passwords, averaging between five and six
• 64% of organizations do not even require users to change their passwords
• 45% allow standard dictionary terms - like “password”
• 29% have no requirements for password length
More details at: http://www.quest.com/newsroom/news-releases-show.aspx?contentid=7986
Secure password solutions? Are you joking?
Yet more evidence of poor password management and hopeless IT access control comes from: ‘Trust, Security & Passwords 2009’.
This is Cyber-Ark’s survey of more than 400 senior IT professionals, mainly from enterprise class companies. Conducted at Infosecurity Europe 2009 and RSA USA 2009, here’s some of the key findings:
• 35% of IT workers used the admin password to access corporate information without authorization
• 74% can circumvent controls to prevent access to internal information
And, if they were fired, almost half said they would variously take:
• the CEO’s password
• the Privileged Password list
• the M&A plans
• the customer database
• the R&D plans
Naughty people…
More details at: http://www.cyber-ark.com/pdf/Cyber-Ark_Spring_2009_Snooping_Survey.pdf