ABSTRACT

This chapter explores how people can become our strongest asset and even act as a compensating strength for areas where mechanical controls are ineffective. It describes briefly at the training and awareness programs that can give people the tools and knowledge to increase security effectiveness rather than be regarded as a liability and a necessary evil. Properly trained and diligent people can become the strongest link in an organization’s security infrastructure. Machines and policy tend to be static and limited by historical perspectives. A good security program starts with a review of the organization chart. From this administrative tool, we learn hints about the structure, reporting relationships, segregation of duties, and politics of an organization. Many firms have information security programs that are floundering for lack of vision, presentation, and coordination. A seminar was held with security managers and administrators from numerous agencies and organizations.