Re: security not a big priority?

["Francois Yang" <francois.y () gmail com>]

> Francois,
>
> Definitely DO NOT look for another job.  It sounds like you're being
> presented with a huge opportunity.  I'd recommend implementing some sort
> of HelpDesk or Priority list so that you can keep track of your tasks.
> I'm not sure what you need the Network Engineers to do, however push
> forward.  Apply pressure on their team to do their part. Try to identify
> the steps involved in completing each task.  It may be easier to
> complete one task if another is already resolved.  Your boss may not
> know much about security, but frankly, he/she may not need to.  That's
> what you're there for.  Step up to the plate and take control of the
> situation.  Use your boss for guidance, but you should really take the
> helm here.  It's been my experience that management support is key.  If
> you can get the support of your boss and his/her peers, then they can
> assist in getting the other teams to work with you.
>
> Again, it sounds like a great opportunity and although it may be
> overwhelming at first, persevere and you will be better for it.  Good
> luck!
>
>
> Kind Regards,
>
>
> JMB


You're right it is overwhelming. The problem with the boss not
understanding how big of a deal this is, causes him not to give me
full support. And that's one of the problem.
You have to remember his roles is to support the network operations.
So his first priority is network operations.  And anything else like
security which requires redesigning the way things are done or making
them do things they never did before. (like following policies) is a
big challenge.  I've created a list of things that needed to be done
with their priority and even put comments on how it can affect us and
other things.  I need the other engineers to work on some projects.
Since I'm not the one who maintain the servers or services, I don't
want to try to make changes to the systems.  But yea, I'll just have
to keep bugging my boss about it.

--
If you think technology can solve your security problems, then you
don't understand the problems and you don't understand the technology.
Bruce Schneier