I think the biggest problem is the small one man shows. I think everyone has been there at one time or another. A company hires on a greenhorn because he is cheep to hire and hope he knows what to do. This has two outcomes, one he sucks and they fire him. The other is he enjoys his work and excels. He is then given the fine pleasure of 3 trays of projects at one time all marked high priority. Not to mention his very poorly network configuration which he must change but lacks the time to.

So what happens to security? The small things are overlooked, your in a rush because people are all over your back and you also have to do the techsupport.

I am guilty of the above. Not to sound cocky. Flooded with projects which "MUST" be done today. Security is something upper management doesnt understand thus doesnt put a priority on it. I do the best i can (which isnt enought).

Maybe im one of the few but, im willing to say that yes im a greenhorn, however im willing to learn and am learning from my mistakes as they come up.

Everything stems back to the education of management. ( From my point of view ). Theres all kinds of things that SHOULD be done, but CAN they be done?

One thing i have learnd is this. There is a difference between watching someone be bitten by a dog and yourself being bitten by the dog. Dog being security breaches.

-B

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/139/18000#18000