Respondents to the 2004 Ernst & Young Global Information Security Survey cited lack of security awareness by end users as the top barrier to achieving the required level of security. Yet raising awareness through security training programs was ranked just sixth and eighth in the list of security priorities in 2004 by business chiefs and IT execs, respectively. Business leaders ranked enforcing information and security policy as the first priority, which begs the question, how will this be done if training isn't even a top-five initiative?

By Linda Leung at Computerworld.

[ Read more ]