25%

75%

100%

50%

Risky, but only for

retailers

Moderately risky,

precautions should be taken

Very risky, it should be avoided

Not risky at all, it's

completely safe

He was a professional hacker

He

was a sysadmin in a

school computer lab

He was a computer geek at school

He was a detective inspector

They didn't have a strong firewall

They displayed the CEO's ID

on the same screen as the login prompt

They left the system

unattended

They didn't have a backup system

He had inside help

He used a powerful machine

He bribed the operators

He guessed some passwords

Sharing passwords with colleagues

Ignoring failed access attempts in event logs

Using common names or dictionary words as passwords

Installing firewalls to restrict access to a

network

Managing computer networks

Gaining unauthorized access to computer systems

Developing computer software

Creating computer hardware

To test the system regularly using event logs

To make it easier for users to remember the

password

To make it difficult for

hackers to guess the password

To allow easy access to the system

Sending fake emails with password requests

Guessing the password based on personal information

Pretending to be from the company and asking for passwords

Hacking into the person's phone to get the

password

Installing firewalls to restrict access

Phoning up someone to get their password

Using a callback system to verify identity

Typing in “guest” or “demo”

as the ID and password