Friday, December 10, 2004

Trying to remember new passwords isn't as easy as ABC123

Security experts have long recommended that computer users choose hard-to-break passwords and change them frequently in order to frustrate hackers. Now, those recommendations are being newly forced on millions of U.S. workers in the name of preventing financial fraud under the Sarbanes-Oxley corporate-reform act.

The law, enacted in 2002 in the wake of accounting scandals at Enron Corp. and elsewhere, created an oversight body for audit firms, stiffened penalties for fraud, and required auditors to certify that firms have adopted adequate "internal controls" to prevent fraud.

No matter that Sarbanes-Oxley doesn't actually require changing passwords: In the name of those "internal controls," auditors and consultants are prodding companies to require that employees pick tougher passwords, and change them more frequently.

But the zeal for impenetrable computer systems rubs up against the limits of human systems. To cope with repeated changes to multiple passwords, many users adopt strategies that actually thwart security.

Trying to remember new passwords isn't as easy as ABC123

Send to a friend:

<< Home

Previous articles

'Continuous' Will Be Key to Compliance

Tech companies struggle with Sarbanes-Oxley

Court Defies SEC, Upholds Limitations on Expiring Fraud Claims

SEC open to delisting for UK companies

GTP and Relational Security Partner to Streamline Third-Party Security Audits Required Under Such Regulations as SOX and GLB

Small Companies Get a Break on Sarbox Compliance

Ex-SEC chief lauds reforms

Improving accountability - boardroom inspection

Watchdog to hire 100 enforcers

Accounting Firm Trades In SEC Practice for Governance Practice

August 2004

September 2004

October 2004

November 2004

December 2004

January 2005

February 2005

March 2005

April 2005

May 2005

June 2005

July 2005

August 2005

September 2005

October 2005

November 2005

December 2005

January 2006

February 2006

About inside Sarbanes-Oxley

inside Sarbanes Oxley is dedicated to finding the best sources of news and information on the changing landscape of Sarbanes Oxley and compliance. Whether you call it SOX, Sarbox, or the Sarbanes-Oxley Act of 2002, look no further than inside Sarbanes Oxley.

Additional resources

Try these recently updated resources:

RSS Feed

Interested in staying up-to-date on all the latest Sarbanes-Oxley news? Subscribe to the inside Sarbanes-Oxley RSS feed and get all of the latest news on SOX delivered directly to your feed reader.

inside Sarbanes-Oxley RSS Feed