Why management doesn't get IT security
At the request of the Department of Homeland Security, a group called The Conference Board completed a study about senior management and their perceptions of IT security. The results aren't very surprising.
Most C-level executives view security as an operational issue -- kind of like facilities management -- and not as a strategic review. As such, they don't have direct responsibility for security.
[ Read more ]