Security in today's real world
I have painted a somewhat black picture. There are techniques available today that almost completely address the issues that I have described but, surprisingly, even data security professionals are frequently not au fait. There are simple solutions to securing data across extended networks, the internet and even physically vulnerable laptops, and there are ways of outsourcing functions whilst retaining an iron control over access to the data (even from within the It department). And the good news is that it is even possible to ratchet up security whilst making life easier for end users.
The secret is for the board not to abrogate responsibility on the grounds that IT security is a complex, technical problem. They really need to invest the time into understanding the issues and being able to assess for themselves whether the right security strategy is in place.
Armoursoft is a leading data security organisation, specialising in encription and data access solutions. Company web site: http://www.armoursoft.com