People are stupid beyond belief. No amount of opsec lectures is going to do anything. You ban the device if you want to protect against the threat it represents.
Its not the grunts on the floor that will bring in the phones once they are banned. It will be the middle managers and higherups that are "too important" to let go of their smart phone.
It will be lisa the executive assistant that will have one (newest model iphone of course) that will flaunt the rules because her work is too important.
Data will be stolen and it will all be blamed of some grunt who brought in a phone and got fired 7 months back.
I once had a manager playing with his smart phone in a secure facility with classified info up on my screen and about blew a gasket. He got walked out a few weeks later.
Every halfway competent company already has their employees go through security training and regular refresher courses. But breaches still happen, because the average normie end-user is dumb.
Take a look at the proprietary google shit that gets uploaded to github every now and again. We have but one prayer: "Lord, may our enemies be stupid."
People are stupid beyond belief. No amount of opsec lectures is going to do anything. You ban the device if you want to protect against the threat it represents.
Its not the grunts on the floor that will bring in the phones once they are banned. It will be the middle managers and higherups that are "too important" to let go of their smart phone.
It will be lisa the executive assistant that will have one (newest model iphone of course) that will flaunt the rules because her work is too important.
Data will be stolen and it will all be blamed of some grunt who brought in a phone and got fired 7 months back.
[* it will all be blamed on some white guy - as others have the threat of violence to protect them]
I once had a manager playing with his smart phone in a secure facility with classified info up on my screen and about blew a gasket. He got walked out a few weeks later.
Every halfway competent company already has their employees go through security training and regular refresher courses. But breaches still happen, because the average normie end-user is dumb.
Yep.
Take a look at the proprietary google shit that gets uploaded to github every now and again. We have but one prayer: "Lord, may our enemies be stupid."
...and He answers!
The factory workers will comply. Some HR lady won't though and screw the whole thing up.
It's usually HR making decisions they don't understand.
They just don't care, and they don't take the time ( or are too stupid) to follow through.