1. Improper password use.
2. Lack of education.
3. No backups.
4. Plug and surf.
5. Not updating.
6. Ignoring security patches.
7. Trust.
8. Not using encryption.
9. Trying to do it all yourself.
10. Proper instruction.
via smsmallbiz
#1: Sending sensitive data in unencrypted e-mail
#2: Using “security” questions whose answers are easily discovered
#3: Imposing password restrictions that are too strict
#4: Letting vendors define “good security”
#5: Underestimating required security expertise
#6: Underestimating the importance of review
#7: Overestimating the importance of secrecy
#8: Requiring easily forged identification
#9: Unnecessarily reinventing the wheel
#10: Giving up the means of your security in exchange for a feeling of security
via techrepublic
1. Trusting people
2. Thinking your OS/server/Web app/wireless network/whatever is already secure
3. Failure to confirm that your disaster recovery plan actually works
4. Incorrectly prioritizing the protection of specific assets
5. Failing to convince upper management of the need for security -– especially integrated security
6. Forgetting that road warriors WILL use unsecured wireless access points
7. Not properly managing passwords
8. Supplying help desk support without thoroughly authenticating callers.
9. Mistaking obscurity for security
10. Writing down ALL your security measures and failing to properly secure that document
via techrepublic