te or strategic information. Combatting Security Threats with User Training User training is an important strategy toward preventing inadvertent security breaches and in gaining the cooperation of employees in adhering to corporate practices. If employees understand the crucial nature of lost data, they might take extra precautions to protect it. This can include measures as simple as not taking strategic information out of the organization, reporting losses immediately, and not leaving passwords on sticky notes under keyboards. They will also be more careful in not allowing unauthor- ized outsiders entry into the organization. This can be something as fundamental as not allowing people without badges to walk into secure areas behind them. Another point that should be stressed is not leaving unattended computers active SO that other users have access to strategic information and e-mail messages. To prevent this, some orga- nizations configure their computers to time out and enter a password-protected standby mode if they are inactive for a specified amount of time, or they institute rules that all employees must shut down their computers at night. Training end users on how to recognize online e-mail scams and warning employ- ees to never give out passwords online are effective tools in guarding against social- engineering-type scams. Social engineering involves gaining people's trust SO that they will provide strategic information or information such as passwords, account numbers, and private client data. PRIVACY Information about consumer buying habits is a key advantage for advertisers who purchase ad space on the Internet. However, it can also create issues for people con- cerned about privacy. New, sophisticated software is able to add small software files to Privacy browsers. These software files track which sites an individual visits. For example, if a user clicks an ad containing video that uses Adobe's Flash or HTML5, the advertiser can compile a list of sites that she visits after clicking the ad. With t