Having spent work-study hours as the student manager for a computer lab at a private college in the mid 90's, I can empathize with their situation. I think the integration of an Information Security Awareness (or some such) class is a fantastic idea. Target the class at high-level principles, and throw in the occassional hands-on application of those principles. Get the community to understand why having policies is important. Then, go from there.

Sooner or later it comes down to the Human Firewall guarding the network...

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/267/28470#28470