(August 29, 2022 at 7:46 am)popeyespappy Wrote:(August 26, 2022 at 6:24 am)Jehanne Wrote: I have worked in IT for 30 years and have a Bachelor of Science in Computer Science and a MBA from the University of Iowa. You can make IT systems absolutely secure, IF you know what you are doing. In fact, it takes some work to make your typical Windows PC insecure.
We are currently working on making our systems compliant with the government's new CMMC security standards. One thing I have learned from this process is that the more secure your systems are the less user friendly they are. Data loss prevention has been one of the toughest issues to solve. Yes we could easily enough lock our data and containers down so that no one outside our domain could access the data. Which would put us out of business because we get paid to producing data for people outside the organization. That leaves policy for protecting data which is far from absolutely secure.
Yes, it's sometimes a pain in the ass, but, Microsoft once saved my account, as they detected a "suspicious IP", rejecting a fraudulent login attempt, even though the perp had somehow gotten my password. The ironic thing is that I never bothered to change my password, and the perp (who lives somewhere in Egypt) has never made a second attempt. And, so, with all the VPNs, push notifications and constant 2-factor authentications, I sometimes wonder how much of my lifespan is consumed by authenticating myself to various IT systems. In my present job, I am at least hourly.
