Re: Information Security

[simonis () myself com]

> >
Id like to assemble a toolkit both for gaining security control and
then maintaining it. Also pointers as to best practices and the like
would be most appreciated.
<<

Based on the limited information, you likely have a bigger problem than you can solve alone.  The first step necessary 
for an efffective security program isn't tools, it is agreement by management that security is necessary, which it 
seems you may not have.  Once management agrees, the next step is a policy to help everyone understand what their 
responsibilities are.  This should be clear and unambiguous.  

Only then should you think about what tools are necessary, since these tools will be technical means to enforce the 
policy.  

Do you even have the basics covered... properly managed firewalls, managed AV, etc?