Simply Secure*

With security measures, sometimes less is more. I worked in an organization that had so many project code names we couldn't keep them straight. We wanted to limit code names to critical projects but our boss, who had an affinity for bureaucracy and secrecy, suggested we regularly send everyone a master list with all the project names and descriptions. This would have been an even bigger security risk than not using code names at all. Another company I worked for decided to require a new network password for each user every month. After about four months people could no longer remember their passwords. At least half the computer screens in the building had a post-it with the user’s current login password.