Re: [ISN] Staff 'need reasons' to believe in security

From: InfoSec News (isn@private)
Date: Sun Oct 16 2005 - 21:03:30 PDT


Forwarded from: Harlan Carvey <keydet89@private>
Cc: edit@private

> http://www.zdnet.com.au/news/security/soa/Staff_need_reasons_to_believe_in_security/0,2000061744,39217156,00.htm
> 
> By Tom Espiner
> ZDNet UK
> 14 October 2005 
> 
> Companies must ensure that their staff understand the reasons behind
> security policies and support them, rather than just dictating them
> from on high,

Here it is...the latter half of 2005, and this is being reported as
"news"?  Sorry, but security professionals have been saying this since
the early days of infosec.  It doesn't take a rocket scientist or a
brain surgeon to understand what you see when senior management
dictates any sort of policy to the assembled masses, and doesn't
bother to follow it themselves.
 
Wow.

HC

------------------------------------------
Harlan Carvey, CISSP
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com
------------------------------------------



_________________________________________
InfoSec News v2.0 - Coming Soon! 
http://www.infosecnews.org 



This archive was generated by hypermail 2.1.3 : Sun Oct 16 2005 - 21:16:45 PDT