A blog from Colin Beveridge caught my eye and touched a nerve. Colin says:
We need a holistic approach to information security that
properly encompasses the social/ cultural aspects, rather than the
prevailing exclusive emphasis on security technology.
It’s a pipe dream and will remain as such for as long as information security continues to be treated as a seperate function of the business, struggling to fight its way out of the IT budget bag.
Colin is dead right of course, a “joined up approach” is needed. If only more would listen and take note. In these cash strapped times having a holistic approach to security could save a fortune, as well as making the business more secure.