New Paper "Five basic mistakes of security policy"
...basic mistakes of security policy." The actual mistakes are
Not having a policy
Not updating the security policy
Not tracking compliance with the security policy
Having a "tech only" policy
Having a policy that is large and unwieldy Indeed, the stuff is pretty basic, but that is exactly the intention
About me: http://www.chuvakin.org

