Top 10 Excuses For Not Securing Your Website or Network

Introduction

If your company is like most, it has neglected to perform basic due diligence in securing its vital assets. How and why does such a critical part of information technology management get overlooked? The amount of excuses we have discovered is endless. Here are some of the best:

1. No one forced us to do it.
   
   
2. Our administrators need to use the security holes to get their work done.
   
   
3. Our firewall is not licensed.
   
   
4. Mafiaboy is not really in the "Mafia."
   
   
5. We use HERF guns and off-site storage instead.
   Note: HERF is a High-Energy Frequency Gun that shoots a high-powered radio signal at an electronic device to disable it. The U.S. embedded HERF guns in bombs to disable Iraq's air defense in 1991.
   
   
6. Our ACLs are toast.
   
   
7. Our security is our own secret.
   
   
8. We were sold to some hackers.
   
   
9. It's not part of our IT agenda.
   
   
10. We wanted a baseline so we look good next time.

Don't let your organization fall victim to silly excuses. Hold someone accountable for managing and implementing security and take no prisoners.