SecurityRatty: Ignoring threat assessments... interesting approach to information security

This is cache of http://networking.ittoolbox.com/r/rss.asp?url=http://blogs.ittoolbox.com/security/adventures/archives/ignoring-threat-assessments-interesting-approach-to-information-security-22715. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

Ignoring threat assessments... interesting approach to information security

2008-02-26 09:59:42 by Editor in Adventures in Security

I find it disturbing that someone responsible for student and employee PII at one of our country's largest universities has what appears to be a flippant disregard for third party threat reports/assessments. What other information is ignored because the person in charge believes that what was good enough 6 months ago is still good enough today? Further, how many other organizations approach security control design, implementation, and management in the same way?