Search

  
 
Workers frustrated with password policies


September 28 2005

Workers frustrated with password policies

 


A survey of 1,685 US businesses has shown that nearly a quarter of workers have to remember 15 or more passwords.

The researchers claim that this is costing money because of the level of support calls and the length of time it takes to get passwords reset.

Nearly one in five of those questioned had to wait an hour or more before regaining access to their systems.

Many users are writing down their passwords to deal with the problem, which can lead to a serious breach of security.

A quarter of users store them on a spreadsheet on their PC, 23 per cent on a PDA, 15 per cent keep a paper record and nearly one in 20 attach their password to the PC with a Post-it note.

"Compliance initiatives have led companies to enforce and strengthen password policies, which has resulted in additional burdens for the end user, such as requiring that employees change passwords more frequently, or use passwords that are very difficult to remember," said Andrew Braunberg, senior analyst at Current Analysis.

"Paradoxically, password policies that are not user-friendly spur risky behaviour that can undermine security. These policies also raise IT help desk costs as companies allocate more resources to password resets."

The survey, sponsored by RSA Security, found that 88 per cent of respondents are frustrated at their company's password policy.


 

Reproduced from an article published by vnunet.com
© vnunet.com

The original article can be viewed here:
http://www.vnunet.com/vnunet/news/2142910/password-proliferation-causes

 Bookmark Digg this story

RSS feed  |  About RSS feeds

Get the Industry's top stories delivered straight to your inbox...
Firstname:

Surname:

Email:

Frequency:
 Daily  Weekly
 
 
Industry News
Case Studies
White Papers
Press Releases
Vulnerability Advisories
Monthly Newsletter Archive
Bandwidth Management
Consultancy Products
Content Control
Desktop Protection
Email Management
Encryption Solutions
Firewall/VPN Solutions
Identity and Security
Intrusion Management
Network Optimisation
Secure Remote Access
SIEM (Event correlation)
Strong Access Control
Vulnerability Management
Web Services Security
Wireless Security
About GSS
Supported Charities
Partner Accreditations
Exhibitions & Events
Contact Details
Location
Careers
Terms & Conditions of Sale
Network Penetration Testing
Web Application Testing
Managed Vulnerability Scanning
Citrix ESA
Wireless Scanning
GCSx ITHC Testing
Vulnerability Advisories
ICS Catalogue