Creating Appropriate Security
Understanding Needs
- Need to make security proportional to risks
- Organizations face different risks
Policies and Enforcement
- Policies bring consistency
- Training in the importance of security and in protection techniques
- Social engineering prevention training