Blame IT and Security, Not End Users, for Password Problems – The New Stack

[ad_1]

End users lack security best practices, but last year’s shift to remote working reminds us technologists need to look at themselves in the mirror before they complain too loudly.

BitWarden reported that 53% of IT decision makers shared passwords via email, a large increase from 39% a year earlier. Security apathy is of particular concern among information security professionals, 84% of whom have felt exhausted [email protected]State of Access Report 2021. Almost half (44%) of InfoSec professionals in this survey said that security rules and policies “are not worth the trouble.” “

Burnout leads to job mobility, which becomes a bigger safety issue once an employee leaves a company. Thirty percent of those polled in Teleport’s State of Access to Infrastructure and Security report were less than 75% confident that former employees had had all of their access keys revoked.

Source: [email protected]Access 2021

Access management, then without password, then Zero Trust

Supplementing passwords with another authentication method helps but does not solve the fundamental problem that some people have centralized access to the infrastructure. Seventy percent of the Teleport study still grants access to the infrastructure with passwords. Although VPNs have fallen into disuse, they were still used by half of this study, as were hardware security tokens. One-time email links and short-lived identity certificates were less common.

Teleport sees certificate-based authentication as the basis of what is called a password-less infrastructure. Almost half of the people who do not use short-term certificates believe that the accreditation systems used are sufficient. Most don’t think the solutions are too complex, so adopting business plans for Zero Trust can pay off.

Zero Trust gets a lot of buzz, and most people have it on their roadmaps. A 2021 Dimensional Research survey of IT security professionals found that 51% had already started implementing Zero Trust. The same study also indicated that three-quarters believe that Zero Trust is at least very important to their organization’s security posture.

Passwordless access to the infrastructure is one of the components of this access management. Zero Trust requires functioning access management systems. Policymakers who prioritize Zero Trust also need to think practically about the blocking and struggling needed to manage the policy and access management of their existing systems.

Source: Teleport Infrastructure Access and Security State Report

Source: Teleport Infrastructure Access and Security State Report

Lawrence Hecht has been producing information technology market research reports for 18 years. Lawrence previously managed “voice of the customer” surveys for 451 Research and TheInfoPro in B2B enterprise computing markets such as cloud computing, data analytics and information security. In 1999, he created the Internet Public Policy Network (IPPN), a network of subject matter experts that has provided personalized research, white papers, and advice on public policy issues related to technology. Lawrence received a Masters of Public Policy from Georgetown University and a Bachelor of Arts from Rutgers University.

[ad_2]