This was an email that was on the SCADA mailing list this week. Remember that these are the folks that keep the water flowing, sewage moving, traffic lights working and the lights on.
From the list:
FWIW, cyber security penetration testers, AKA “tiger” teams, have been known to sprinkle a general work area like a parking lot, building lobby, etc., with USB drives and in almost all cases have found that most employees will immediately hook them up to their workstations.
The pre-loaded software on the USB drives immediately “phone home” and the tiger team has a nice report available for upper management to justify the high costs of hiring them.
For some enjoyment check it out.
[tags]SCADA List, Security Afterthoughts[/tags]