Winning security policy acceptance
Mark Hughes, Ray Stanton · Computer Fraud & Security · 2006
There are very few organizations today that haven't adopted at least some form of information security measures. The majority have firewalls and anti-virus protection and most will conduct regular backups of data, run anti-spam software and have policies for acceptable use of emails and the Internet. VPNs, secure mobile working, intrusion protection and detection and business continuity plans have all seen growing levels of deployment, indicating that security is being taken seriously at board level at companies of all sizes. As a result, many of these companies feel confident in their ability to protect themselves. But that confidence is often misplaced.