> * Appoint a chief security officer. (It's something that's
> been mentioned on this list before.) It would be great to
> have someone at the top thinking about security full-time.

What, like Microsoft do? ;-)

> Anyone else have thoughts on promoting and educating common sense?

Actually, I think Apple could do worse than look at what M$ have done over
the past few years (I said look at, not slavishly copy!) If Microsoft have
an edge, it's that they haven't restricted their security consciousness to
technical tweaks (I'm not going anywhere near the argument about who's
implemented the better tweaks), it's that they've carried the security
debate way beyond that (academia, business etc.) It seems to me that Apple
think that the battleground is purely technical.

--
David Harley CISSP, Small Blue-Green World
Security Author/Editor/Consultant/Researcher
AVIEN Administrator - http://www.avien.org
Blogs: http://blogs.securiteam.com, http://dharley.wordpress.com/
New AVIEN book: http://www.smallblue-greenworld.co.uk/Avien.html

[ reply ]