Risk Management with Stuart King and Duncan Hart

A blog from Colin Beveridge caught my eye and touched a nerve. Colin says:

We need a holistic approach to information security that properly encompasses the social/ cultural aspects, rather than the prevailing exclusive emphasis on security technology.

It's a pipe dream and will remain as such for as long as information security continues to be treated as a seperate function of the business, struggling to fight its way out of the IT budget bag.

Colin is dead right of course, a "joined up approach" is needed. If only more would listen and take note. In these cash strapped times having a holistic approach to security could save a fortune, as well as making the business more secure.