Effective Use of Consultants in Your Security Programs
Harold Long · Information Systems Security · 2003
A nearly classic symptom of ineffective Security Programs is the annual security review conducted by outside consultants that only resurrects last year's problems with new report covers and a new invoice. All too often, consultants hear clients saying, “…oh yeah, the other consultant we had said the same thing.” 1