I work for a company that does not value privacy and IT security the same way that I do. It's a relative small company that is used to work this way without anyone complaining. The employees don't (seem) to care and the customers have no idea. A few of the problems are:
- Printed passwords, name and addresses of customers
- Not destroying these documents
- Same password for most systems
- etc. etc.
Now I pointed out these points are a serious problem and can cause major damage to both customer and reputation damage to the company. However they don't take me serious since I am just the nerdy IT security student. What is the best way to approach them and convince them that this is unacceptable? I stubbornly keep shredding all the documents hoping more will follow, no luck so far.
Even though it does seem alot like this post I do not think it is the same. However feel free to mark it as a duplicate if im mistaken.