Re: RE:[fw-wiz] Vulnerability Scanners ( was: concerning ~el8 / project mayhem )

From: Dave Piscitello (dave@corecom.com)
Date: 08/26/02 

From: Dave Piscitello <dave@corecom.com>
To: Paul D Robertson <proberts@patriot.net>
Date: Mon Aug 26 10:34:34 2002

If by training you also mean awareness, I agree.

Certain companies do a commendable job explaining the risk lax security and
inappropriate use and moreover, the *direct* cost to every individual in
the company, in "balance ***" effects to share prices, salaries, bonuses
and dividends. They engage employees in the process, give them ownership of
the problem, and ask that each employee be responsible and accept
accountability.

They have fewer security incidents than other companies of like size I've
worked for, without the Draconian practices.

At 09:15 AM 8/26/2002 -0400, you wrote:
>About the only preemptive action that seems to have not landed anyone in
>hot water
>is training.

David M. Piscitello
Core Competence, Inc. &
3 Myrtle Bank Lane
Hilton Head, SC 29926
dave@corecom.com
843.689.5595
www.corecom.com

Quantcast