Bad internal information security practices can lead to theft of confidential information.

Data collected on customers by companies is continuously increasing. The collected information are sometimes in hard copy format, which can be scanned or copied by employees within the company. Additionally, multiple function network printers in the workplace often have no secure passwords, and employees with access to confidential information can easily send jobs to these printers, making information available in hard copy that can easily be scanned or photocopied by unauthorized employees. Therefore, internal methods of data security are just as important as prevention of external access to information.

"Ignorance is bliss" is a dangerous practice that leads to unauthorized access of private and confidential information. There should be a precise information privacy policy regarding access and use of private and confidential information. Collecting large databases of private and confidential information on customers and securing that information from unauthorized access of only half the solution. Even with layered access to information within the organization, the improper use of technology can still be dangerous. For example, preparing sensitive information for your superiors and printing it on a network printer will allow an employee with unauthorized access to read the information as it is printed. Therefore, a staff that has no method of disposing of confidential information can lead to leakage of this information.

Article:

http://www.infosecurity-magazine.com/view/23982/is-ignorance-bliss-majority-of-employees-dont-know-or-follow-it-security-policies/