As cited
Copy frozen at (site build).
identity access
User refused to change her password because everyone already knew it
An IT manager at a UK school inherited a network with a six-character password policy that had never been enforced, including a shared password written on a desk. When the manager attempted to implement a modern password policy requiring immediate changes, the principal overruled him despite the security risk, then reversed the decision after new nonprofit management took over. The data manager who had used the same password since 1998 ultimately took early retirement rather than comply with the new requirements.
Why it matters: IT practitioners implementing basic security controls like password policies will face organizational resistance, and should document requests to override security measures in writing; this story illustrates how delayed policy enforcement and weak credentials create ongoing breach risk in schools and other organizations.
- Source published
- First seen by Cybersecurity Tracker