As of late, our Data Security resembles more of the TSA at airports than a legitimate IT asset.
We recently had to fight security to have access to our Orion Application Servers...you know things like advanced alerts and report scheduling. They insisted it was a poor understanding of security that led our vendor to write an application in a way that someone would need access to a server to administer it. OF course my counter is that it is a lack of understanding that the team who owns the server and the application would be denied access. They, however, were willing to give us access via an atrocious program called Password Vault.
We are now having to fight a battle to monitor our new RSA appliances, because our Security team says it compromises RSA to give us access into the appliance. I again say this is an issue of our security either just being those kids that were beat up in school and now feel big and bad with their TSA badges (Authority). Either that or they have no concept of SNMP v3.
I am curious, are we the only ones with Data Security like this? Is this a common problem or indicative of some cyber bullies on our part?
