Comments for Thoughts of a Security ProfessionalSharing thoughts with the community about my everyday practice with special focus on incident response management, security information event management, and network monitoring.Comment by pa5kl on Pet peeve- July 5, 2007 I do not think business people are lusers, however I do think that sometimes the focus in on short-term results too much. But; that is a whole different topic. !!Click here to go to this entry !!http://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/pa5kl/pet-peeve-... Comment by FriedComm on Pet peeve- July 5, 2007 Unfortunately the people that tend to approve the policies are often the "users"(often refferred to as "losers") themselves. They also tend to pay us, the security folks, the big bucks. :-D !!Click here to go to this entry !!http://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/pa5kl/pet-peeve-... Comment by pa5kl on Pet peeve- July 5, 2007 It is truly amazing to see how much we (have our clients) invest in serious hardware and software : IDS, IPS, SIEM, Firewalls, etc., etc., but when it comes to one of the most fundamental problems in information security, it is feared that "the users" (often referred to as "the business") will not accept the hassle of multi-factor authentication. And since "the business is leading", nothing happens.Authentication is a fundamental prerequisite to Access Control and Access Control is usedhttp://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/pa5kl/pet-peeve-... Comment by Dan Morrill on Pet peeve- July 4, 2007 yeah, but you have to admit, that in 2007, 20+ years into the game, that we still do this on a major scale with major devices and systems. Job Security grin. !!Click here to go to this entry !!http://networking.ittoolbox.com/r/rss.asp?url=http://it.toolbox.com/blogs/pa5kl/pet-peeve-... |