Security Basics mailing list archives

Re: Re: Mobile wireless users


From: jblackley () sysmatrix net
Date: 1 Jun 2005 15:02:35 -0000

Regarding the company's liability - and the assertion that, if you can't enforce it with technology then you can't 
enforce it - a response to both of these is:

While 'automated' enforcement (via technology) is very attractive in that we can set rules and use a tool to keep 
people on the straight and narrow, the company also has a duty to educate users on the appropriate uses of technology.

When tools are not available to us, we do not have the option of simply throwing up our hands and saying, "Oh well, no 
tools available so we must let users do as they please."

Instead, we have a duty to educate users of technology on the risks inherent in that technology. We try to do this via 
policy and standards and we augment those with training courses that address - in this instance - exactly the risks 
that the original post queried.


Current thread: