Security and more security

Just now attended a compulsory training by our Security IT. Their IT was parallel to none, not even to my old company's IT whom I think was paranoia. This one actually send out people to check on the clear desk policies, and moonlight as intruder to see staff response. They will also try to infiltrate the user PC to see if they can take out the confidential information, try to open user's drawer to see if they can take out the files.



The training was full of snapshots of examples of people who got caught i.e with password on post-it notes stuck on monitor, user who locked the drawer and left the key on the table and user who didn't lock his laptop. However the best user that I have seen, is the one who hid his password in the CR-ROM. Not even I thought of that!