Password security in companies: Interview Sebastian Koye WEB.DE GMX

Bizzwire: What is the meaning of the right data protection and secure passwords for companies? Where are the greatest security risks?


Picture gallery


Sebastian Koye: In companies there are many departments with different data-sensitivity. A file server, on which instructions for its own products lie, is less sensitive than e.g. An accounting server on which the billing or personnel data are located. This is about core information that affects the entire company, which should be especially protected. Access to sensitive data requires special protection, and proper selection of authorized employees should be done.


It is also possible to create additional network protection. If you get anywhere from any computer in a business, more damage can occur than with severed network segments.


With regard to passwords, for example, the possibility of guessing this in the context of colleagues and employees is easier. One knows one another and who would not know the first name of the wife or the name of the dog of his citizenship? The password must also be written down in any case.


If private surfing on the Internet is not permitted in a company, this has security-relevant reasons, as the risk of interfering with other malicious software is significantly reduced.


How often should companies change the passwords of their employees?


A now common frequency for changing the password is three months. This can also be set up with today's operating and network systems in such a way that every employee is obliged to do so.


Particular attention should be paid to areas accessible from the outside. These include e.g. The web access for e-mail access or externally used computers with a VPN access.


Corresponding password settings can help to ensure that certain elements such as special characters, numbers, small and upper-case letters are integrated into the password and thus a password can not be guessed.


Our colleagues from the PC magazine present tips on password security


Are there alternatives to secure password? What technical tools are suitable for companies to better protect accounts?


There are sensible additions. The multi-factor authentication offers the possibility to additionally secure a password. For particularly sensitive areas, e.g. With rolling tokens on a key hanger, fingerprint sensors or even smartphone applications, additional hurdles can be created that increase both internal and external data security.


We already use the multiple authentication system for De-Mail, which enables small and medium-sized businesses to communicate on the Internet in a secure way, thus saving costs for franking and enveloping the paper mail.


Thank you for the interview.