Once again, social engineering and halfway-configured systems provide an illusion of security without any actual securing going on.  Not only do you have to train your security staff correctly and completely (and make sure they have brains and use them!) as well as audit regularly, your other employees have to be part of the solution… or they’ll be part of the problem.

Technorati Tags: ,