Sounds like an organizing problem to me.
If a copy of the US constitution is kept on a server and is the only file on that server, shouldn't that server be public facing? Of course, the data in this case is organized since it's 1 file but, as soon as you put your human resources files on it, well you've become disorganized.
Strange to say but, I'm not sure being disorganized is only a security concern, but it's certainly a security concern. Being disorganized is kind of worse than being insecure to the point where security seems 2nd tier to organization :-/ FWIF, maybe "Misplacement" should be highlighted twice somewhere in NASA's "Data Handling" documents/recommendations.
Biting the hand that feeds IT
