Internet and Organizational policies

It is interesting that some people do not care much about data security in most organizations in Maldives. But would it be true to say that they do not care?

I know a system administrator who had the administrative account's password to the email server set with just 3 characters and he was using it at public locations. Almost all organizations allow internet access from the users' desktop machine and they are allowed to use instant messaging and also web-based email most of which allow up to 10MB to be uploaded.

The staff are highly trusted and they could use thumb drives and CDs and most are allowed to install software on their systems. This would go on probably for another five years before it is put to a stop. Already most are realizing the mistakes they make. We have in the past seen photocopies of documents and scanned images of documents on the net "leaked" by some loyal staff and it is quite common that others hear about the news before we inside the organization hear of it.

May time heal all the DATA which is lost due to carelessness of people who are responsible.