Risks of unattended computers

Madrid, October 3, 2005 - The consultancy company Gartner has released, at http://www.gartner.com/press_releases/asset_136443_11.html, a press release describing the risks posed when leaving a PC unattended with an active session running.
In companies, users often leave their desks for many reasons, leaving the session active. This behavior can pose a serious security risk for both the company and the user.
The recommendations for avoiding this problem include implementing timeouts in all PCs to ensure that users are automatically logged out after a certain period of inactivity, minimizing the risk of attack.
According to Gartner, a significant number of unauthorized access occurs when someone sits down at the computer of another user with an active session. Unattended PCs facilitate access to sensitive data and sending of false emails, among other actions.

Risks to companies:

1. Unauthorized access to personal data (for example, salary information).
2. Unauthorized access to business information to which they can make changes (to cover up fraud, increase commission, etc.).
3. Avoid or bypass approvals processes (such as allowing purchase orders).
Risks to users:
1. Unauthorized reading of personal mail.
2. Sending emails in the name of another user, which can cause serious professional damage.
3. Unauthorized use of a computer to cause damage or attack other network computers.

Oxygen3 24h-365d, by Panda Software
© Panda Software 2003

2005-10-04 13:08

Back

IT News: