In reply to a post by broadband66:

One can have the latest technology but common sense when downloading and opening emails still goes a long way.

Risk assessments don't stop accidents.

+1

Even the world's best firewall cannot stop the biggest virus/malware out there: human stupidity

Edited by deleted (Sat 10-Nov-18 11:56:14)

In reply to a post by broadband66:

Risk assessments don't stop accidents.

If your risk assessment doesn't include the possibility of someone accidentally downloading something malicious, or deleting something important, you're doing your risk assessment wrong

Writing a list of possible risks and getting staff to read them doesn't stop human error occurring. But HR/Health and Safety and others say we have to spend time and money so it has to be done.

In reply to a post by broadband66:

Writing a list of possible risks and getting staff to read them doesn't stop human error occurring.

No, but assessing the risks your staff pose to the confidentiality, integrity and availability of your systems and data allows you to put measures in place to manage those risks accordingly.

If you believe there is a risk that some members of staff may download inappropriate content, you put systems in place so that they can't. It's not just a question of telling people not to download things.

That's a fair point.

Example. Scaffolding erected, Portaloos on every floor, risks assessed (or so we thought)!

Lazy prat can't be bothered to walk for a few minutes to relieve himself in appropriate place. Climbs over handrail to do his business and falls breaking a leg. Tries to sue saying he wasn't given risk assessment or told of the risk of urinating while hanging on to the outside of a scaffold.

Some people will always find a way to ruin it for everyone else.

Thanks for your reply. Really interesting information!!