ABSTRACT

Security is people-based. As Bruce Schneier says in Secrets & Lies, “If you think technology can solve your

security problems, then you don’t understand the problems and you don’t understand the technology.”

The first step in a coordinated security process is a security policy.