It’s not hard to find analogies between slack computer security and HIV; both can be spread as a mixture of complacency and frustration push it out of mind as being too pervasive, there’s no complete fix, and it won’t happen to me.

Not true. Yes, those who would do your business harm are finding ever more sophisticated ways to attack it, but so are the technological means of fending off their malice. Unprotected ICT is at the core of the problem: most attacks happen from within the organisation because management ignores the need for properly developed and enforced security policies and procedures.

[ Read more ]