Risks of File Transfer on a Fully Switched Network

["Sadler, Connie" <Connie_Sadler () BROWN EDU>]

I am being told that the risk of transferring sensitive files over our
InTRAnet is so low that we should not require encryption for these
internal file transfers. Transferring over the Internet in the clear is
clearly a problem, but are others willing to share your position on the
transmission of sensitive data in the clear internally (assuming a fully
switched network)??

Thanks...

Connie J. Sadler, CM, CISSP, CISM, GIAC GSLC
Director, IT Security, Brown University
Box 1885, Providence, RI 02912
Connie_Sadler () Brown edu
Office: 401-863-7266
PGP Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x91E38EFB
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x91E38EFB
PGP Fingerprint: DA5F ED84 06D7 1635 4BC7 560D 9A07 80BA 91E3 8EFB