Most of their focus is on protection from outside the company, with little thought given to internal controls. As an example, Cannavino says your cleaning crew can walk through an office and attach devices to computers that will allow the systems to be monitored. On a more complicated scale, most companies entrust passwords to an information technology officer or often a relatively low-level office techie. That individual has potential access to the entire system. And then you have the kings of the Internet age, the programmers.
Systems programmers are, in general, an honest lot.
They are not very creative, working on a lot of caffeine and little sleep. Cannavino says that leads to questionable password security and systems that are relatively simple to decipher. Then there is the Year 2000 frenzy. Cannavino says companies have lowered their guard, inviting programmers and computer system analysts into the most critical company systems while knowing next to nothing about them. Granted this all might seem just a bit paranoid.