I could not agree any more with that statement. I strongly beleive that user ignorance to issues at hand that affect an organization should be held liable to the user. If user fails to adhere to rules and principles put in place to protect them and the environment they are in, then there should be disciplinary action taken and even loss of job or fined.

User ignorance will always be the biggest factor in the Intrusion Detection and Prevention game and until the end user on the box get it in there head the importance of being alert and secure, then we are all fighting a losing battle.

The Suite..

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/231/25665#25665