BSI ID: G 0.31

Incorrect or improper use of devices, systems and applications can compromise their security, especially if existing security measures are disregarded or circumvented. This often leads to malfunctions or failures. Depending on the type of device or system that is used incorrectly, the confidentiality and integrity of information may also be compromised.

A particularly important special case of incorrect use is incorrect administration. Errors in the installation, configuration, maintenance and servicing of hardware or software components can result in serious damage.

For example, overly generous access rights, easily guessed passwords, insufficiently protected data carriers with backup copies or terminals that are not locked when temporarily unattended can lead to security incidents.

Similarly, data can also be accidentally deleted or changed through the incorrect operation of IT systems or applications. This could also result in confidential information being made public, for example if access rights are set incorrectly.

If power or network cables are laid without protection, they can be accidentally damaged, causing connections to fail. Device connection cables can be torn out if employees or visitors trip over them.