SANS Institute

the most trusted source for computer security training, certification and research

The 7 Top Management Errors that Lead to Computer Security Vulnerabilities

Number Seven:: Pretend the problem will go away if they ignore it.
Number Six:: Authorize reactive, short-term fixes so problems re-emerge rapidly
Number Five:: Fail to realize how much money their information and organizational reputations are worth.
Number Four:: Rely primarily on a firewall.
Number Three:: Fail to deal with the operational aspects of security: make a few fixes and then not allow the follow through necessary to ensure the problems stay fixed
Number Two:: Fail to understand the relationship of information security to the business problem -- they understand physical security but do not see the consequences of poor information security.
Number One:: Assign untrained people to maintain security and provide neither the training nor the time to make it possible to do the job.

As determined by the 1,850 computer security experts and managers meeting at the SANS99 and Federal Computer Security Conferences held in Baltimore May 7-14, 1999

Check Them Out!

This is hands-down, the premiere training opportunity.
- Dan Mather, JICPAC