A customer has invested in firewalls, anti-virus software and intrusion detection systems that are all regularly monitored and updated.

It downloads patches, backs up data, trains its staff, secures its wireless networks, and never, ever writes passwords on Post-it notes (well, hardly ever). So it has got security sorted, right?

Wrong. These measures should protect against most conventional threats. But IT security never stands still. There is always a new threat.

By Paul Bray at vnunet.

[ Read more ]