Perhaps it's not what you intended to convey, but comments like these give credence to the thought that the IT department killed IT. IT is about providing solutions to the needs of their customers: the marketing, product development, and revenue generating portions of the company.

As a security practitioner, risk management and legal compliance are major knowledge domains that I and you should care about. If in doubt, refer to sections 4 and 15 of ISO17799 (or its newer incarnation) or 2 of the 11 CBK's for the CISSP certification.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/467/34972#34972