Comment by memetherapy

Forget older employees, just employees. And I've seen enough poor security practices by 20 somethings at tech firms to have any faith in any user. Favourite example I've seen in several companies including one doing extremely sensitive work - senior devs with root access to the jewels of the kingdom doing pair programming on their own machines with interviewees / interns / new staff and leaving the computer unattended and unlocked to pop to the loo, grab a coffee, or let the junior work something out on their own.