Security/Privacy Compliance: Culture Change
Melissa Guenther · EDPACS · 2004
Organizations invest heavily in the latest firewalls, intrusion detection systems, and other advanced security technologies; yet losses from security incidents continue to grow each year. This is because the problem is not so much with security technology as it is with the lack of security awareness among users. All too often information security professionals have to deal with breaches caused by users opening an e-mail attachment with a virus that replicates itself across the enterprise, forgetting to backup critical files, using weak passwords, losing laptops with confidential data, or being tricked into giving up their passwords through social engineering techniques.