I'm often asked for advice on organising security functions. One increasingly common question is should information and physical security be merged. I have lots of observations on that, having served my apprenticeship switching many times between the two functions.
I've just posted a brief analysis of some of issues associated with merging information and physical security on my Infosecurity Europe blog. It's essential reading for anyone contemplating (or aiming to resist) such a merger.
Comments (2)
debate colleagues brightness sunlight indicate 2100 leading
Posted by tyforce | August 6, 2009 2:52 AM
Posted on August 6, 2009 02:52
Good reading, concise article. For smaller organizations, it's often easier to let the datacenter worry about the physical security and just concentrate on plugging the holes in the apps, OS and firewall.
Posted by BarryInOrangeCounty | September 7, 2009 7:23 PM
Posted on September 7, 2009 19:23