Re: RE:Vulnerability Scanners ( was: concerning ~el8 / project mayhem )

[Dave Piscitello <dave () corecom com>]

If by training you also mean awareness, I agree.

Certain companies do a commendable job explaining the risk lax security and 
inappropriate use and moreover, the *direct* cost to every individual in 
the company, in "balance sheet" effects to share prices, salaries, bonuses 
and dividends. They engage employees in the process, give them ownership of 
the problem, and ask that each employee be responsible and accept 
accountability.

They have fewer security incidents than other companies of like size I've 
worked for, without the Draconian practices.

At 09:15 AM 8/26/2002 -0400, you wrote:
> About the only preemptive action that seems to have not landed anyone in 
> hot water
> is training.


David M. Piscitello
Core Competence, Inc. &
3 Myrtle Bank Lane
Hilton Head, SC 29926
dave () corecom com
843.689.5595
www.corecom.com



_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards