Securing the Organization: Creating a Partnership between HR and Information Security
It's become conventional wisdom among information security professionals that people are the most critical part of effectively securing an organization. From the staff accountant end user to the Board of Directors, every person involved in an organization plays a role in that organization's security. This includes having first-rate information security personnel to create policies and oversee implementation, obtaining management buy-in and support for the security program, and ensuring employees throughout the enterprise understand, respect and evangelize security policy.