Are your accounts closed?

Network negligence can leave corporates vulnerable to attack.

Written by Liesbeth Evers, Network News

Network users' slack system management is creating a security risk, industry experts have warned.

Rob Enderle, research fellow at Giga Information Group, said maintenance on user accounts has become an important networking issue. He warned that negligence in closing accounts after a user left the company could subject corporate networks to the mercy of disgruntled ex-employees, temps or contractors.

Enderle argued that organisations usually deploy multiple software applications, with separate accounts to set up. After creation, each login needs maintenance and closure when users leave the company.

But the complexity of the account maintenance process was prone to create "orphan accounts", which remained open even though users had left the company.

"It means an important security risk. Fraud cases often involve temps who used their system account after they left the company," he said.

Even IBM has been known to have left accounts open three months after the employee has left.

Software company Access360 last week presented enRole, a product that aims to reduce time spent on account creation from a typical five days to 10 minutes, and simplify maintenance and closure of accounts.

Enderle said the product held an advantage over competing products as it works across all systems, while IBM or Microsoft products only work for their own range of software.

Brian Anderson, developer-turned-chief marketing officer at Access360, said enRole integrates separated system accounts into a single point of administration. This ties into the HR system to verify if employees exist, and flags accounts where system authorisation exceeds job title.

"An international oil company recently started using our product, and found they had 80,000 orphan accounts. This number is not unusual in large corporations and network managers should plug this gap in their security," he said.

Rob Bruce, executive vice-president at InterX, said a similar product may have been useful when the company laid off a quarter of its workforce.

"We shut down the network to rule out abuse," he said.

  • Have your say
  • Send to a friend
  • Share
  • Print

See also:

reader comments

related articles

Online staff face spectre of Big Brother

Just over 25 per cent of the global online workforce, or 27 million employees, have their internet or email use monitored by their employers. 10 Jul 2001

Sacked employees blow whistle on pirates

Disgruntled IT professionals who have fallen victim to the latest round of layoffs are hitting back by reporting their former employers' use of unlicensed software. 09 Jul 2001

latest news

Lenovo targets HP partner base

Vendor looks to expand reach and looks to rivals' channels to achieve its aims 03 Jul 2009

VMware rakes in 700 service provider partners

Virtualisation giant claims VSPP programme has gained significant traction in short space of time 03 Jul 2009

Compellent hits out at debate snub

Storage vendor writes open letter to prime minister in protest at being left out of £1bn stimulus debate 03 Jul 2009

poll

Feeling secure?

Feeling secure?

Is offering standalone security still a viable business model?

View poll results

boxing ring

CRN Fight Night 2009 bouts now LIVE!

It is time to relive the craziness that was CRN Fight Night 2009

Eddie Pacey and Nitin Joshi

In The Studio with CRN: Credit in the Channel

CRN Editor Sara Yirrell chats to two of the industry's credit stalwarts - Nitin Joshi and Eddie Pacey

events

East Sussex golf resort and spa

CRN Golf Challenge 2009

Join us for the premier golf event in the channel calendar

CRN Channel Conference 2009 logo

CRN Channel Conference 2009

A one-day conference dedicated to the needs of businesses in the UK technology channel

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Advertisement

White papers

Search white papers

Top categories

Primary Navigation