By Curtis Franklin Jr.

Successfully securing government organizations depends on knowing the systems, identifying the risks, and keeping people and procedures in mind

The first thing to understand about IT security is that technology alone can’t save you. It’s tempting to think that a fabulous new product, whether hardware or software, will come to the rescue, solving security problems while leaving users happy and productive.

Unfortunately, the best security products can only implement the policies and procedures put into place and enforced by administrators. These policies and procedures provide the greater part of security for any IT resource. Indeed, the greatest amount of security administrators’ time and effort goes into developing, implementing, and enforcing policies and procedures.

CLB: Great quick snapshot of good security practice. Worth a review for infosec professionals working in SME environments.