The Guy sounds like me ...
Re: Study: U.S. government still lacking data protection.
"In the Cold War, you paid your taxes and the government took care of national security," he said. "But in the 21st century, you don't need a uniform to serve. When I go out and speak to people, my goal is to talk about the larger infrastructure and how the first line of defense against those who would steal information is the IT professional in the bank, the power company, the shopping center and so on. Security starts with the individual."
Lieutenant General Kenneth A. Minihan (born December 23, 1943) is a former director of the National Security Agency (retired 1 May 1999).
From
You need boots on the ground.
Information security is the new arms race
Today’s business must deal with new threats: malicious hackers, criminals, and industrial spies. These predators regularly steal corporate assets and intellectual property, cause service breaks and system failures, and steal corporate brands. There is also the long-term effect of: loss of customers, damage to brand, loss of goodwill. Do not look for technology to solve any of these problems. Crooks can find ways to steal your information assets faster than our security technology companies can bring products to market.
Information security is the new arms race, and the attackers have all the advantages. You have to defend your business against every possible attack, while the attacker only has to find one weakness. To make manners worst no technical skills are required to carry out these attacks. Do not look for law-enforcement or the government to help out. Strict privacy laws are making companies not only liable but executives could be doing jail time if they do not take steps to protect the privacy of their customers.
Real security is about people. People who are trained and security aware. The only way to stay ahead of new vulnerabilities and attacks is by people responding and not technology. If you want to protect your organizations information assets you need boots on the ground.
Latest security headlines from Network World:
It only seems like the only news is the economy
Google in curious alliance with click-fraud detection firm
Apple posts Security Update 2008-007
|
Does Verizon's Voyager stack up to the iPhone? |
|
|
5 IT skills that won't boost your salary 
[1,407]
Women 4 times more likely than men to cough up personal info [589]
Japan's 10 funniest tech-related commercials [Videos] [407]
Throwing away a promo CD is "unauthorized distribution"? [1,265]
Adults too quick to dismiss educational video games [682]
Attack of the iPhone clones [Slideshow] [578]
10 things IT needs to know about AJAX [1,258]
This Year's 25 Geekiest 25th Anniversaries [Slideshow] [409]
|
|
Very good points
As the main point in article, I agree, it is not the technology but people. Technology helps but often after the fact. I have been part of catching some security breaches, misuses, etc since 70's and about half of the cases had very little to do with system security but the infrastructure itself. Unfortunately in computer world people ( often management ) sees / hears problems as a system problem, not as a business problem which it is. Again, a very good article and I hope that it will wake up at least some audience.