We don’t restrict our employees on our network, what could go wrong?

Many companies take a hands-off approach when it comes to controlling what their employees can and can’t do on the company network. This may allow them more freedom to get their work done, but this freedom comes at a cost, and for some companies that cost can be very steep. An employee can inadvertently open a big digital door into your network in a myriad of ways: using a weak password that can be easily guessed, clicking on links and installing malware or ransomware, storing sensitive/confidential company information in unprotected folders on their personal computers. By implementing a “method of least privilege” approach to data management, you ensure that people only get access to the things the absolutely need to have access to, and can only do the things you explicitly allow them to do, everything else is denied by default. This will reduce (but not entirely eliminate) the possibility of an employee’s bad behaviour taking down your entire company network, and in an extreme case taking down your company!