RSA Security survey reveals password management challenges

Corporate IT Update, Sept 28, 2005

CORPORATE IT UPDATE-(C)1995-2005 M2 COMMUNICATIONS LTD

The challenges faced by end-users in managing passwords have been revealed in a security survey conducted recently by RSA Security Inc (Nasdaq:RSAS), a provider of identity and access management solutions.

The survey of 1,685 enterprise technology end-users in the US detailed the potential for corporate IT security risks that result from the management of passwords. It found that 28% of respondents manage over 13 passwords at work and claimed 88% are frustrated with the challenge of password management, which is resulting in behaviours that could place IT security and compliance initiatives at risk.

According to RSA, the need for end-users to memorise passwords results in less secure management, with 25% of respondents storing a password spreadsheet or document on the PC. Of respondents, 22% said they record passwords on a PDA or other handheld device and 15% admitted to keeping a paper password record in an office/workspace.

The survey also found that productivity is lost when employees seek IT help desk assistance for a lost or forgotten password, with IT staff taking over 16 minutes to help 17% of respondents. When asked about the effect of a "master password" for gaining access to all other passwords, 98% of respondents said an additional layer of protection would be needed and 55% cited an extra security layer as very important.

((Comments on this story may be sent to info@m2.com))