Modern client operating systems are very complex. Therefore, the misconfiguration of components in particular can compromise security so that IT systems function incorrectly or may be compromised. In general, each interface on an IT system not only provides the opportunity to use certain services of the IT system in an authorised manner, but also carries the risk of the IT system being accessed without authorisation. For example, if incorrectly configured authentication mechanisms make it possible to obtain user IDs and the corresponding passwords, the applications or IT systems in question may be used in an unauthorised manner.

Incorrect or improper use of devices, systems, and applications may also jeopardise security, especially if existing security safeguards are ignored or bypassed. Security incidents can occur, for instance, when access rights are granted too liberally, passwords are easy to guess, storage media containing backup copies are inadequately protected, or workstations are not locked during temporary periods of absence. Another possible consequence of the incorrect operation of IT systems or applications involves the accidental deletion or modification of data. It is also possible for confidential information to fall into the hands of third parties if access rights are set incorrectly (for example).