It’s a simple scenario. You walk into a company’s boardroom, take out your laptop and connect to the network. It doesn’t matter that the device doesn’t have the latest security or updates, that you can access and use any of your potentially unsecured applications, or that perhaps you’re not quite who you say you are. You’re in.

Think this is an unusual scenario? You’d be wrong.

“Whenever I enter a new company’s premises, the first thing I do is connect to the network so I can see what is open to me,” says Egideon Bands, CEO, DataGr8. “Often the network allows me to connect regardless of patch, operating system or update status. The problem is that if they allow me to do anything I like on the network, what about someone who isn’t who they say they are? What about the risks associated with social engineering or phishing? And what if a person accessing the network gets the DNS?”