Box ticking or ticking time-bomb?

We need a holistic approach to information security that properly encompasses the social/ cultural aspects, rather than the prevailing exclusive emphasis on security technology. 

Of course, the cynical part of me realises that “security technology” is such a big business and that might not be helped by promoting the necessary improvements to social and cultural behaviours.

Nevertheless, a truly joined-up approach is desperately needed by many organisations, especially those lulled into a false sense of security by ticking the technology boxes but not ticking the people and process boxes. (see downloads)

Possibly related posts:

• Nobody needs a Chief Information Officer
• The ABC of Building a Senior Team
• Ghosts in the machine
• Book review: Fruition
• Strategic plans in the bin? Let’s use the crisis to sort ourselves out.