Most organisations have at least three primary resources - money, people and information. I have always found it strange that people accept the procedures and controls imposed on the first two, but typically resist any attempt to implement similar processes for information management and security. And quoting good practice or horror stories rarely changes their minds.

IT consists of two words - 'information' and 'technology', and I think there is too much emphasis on the latter, at the expense...
Continue reading ...