RE: Security questions

["John Earl" <john.earl@xxxxxxxxxxxxxxxxxx>]

Ken,

>       One thing I've been able to conclude, from all the rhetoric on
this
> subject, and perhaps a conclusion, is that
>       an organization almost needs a full time individual on staff
looking
> after computer security.

I don't think so.  I think that what the task requires is a good set of
tools.  If you were to do it all yourself, then yes, maybe you need one
(or more) full time dedicated staff to be the Security Officer.  But if
you embrace the logic of automation (like we in the tech industry preach
to _our_ end-users), then you would employ tools to make your job
easier, faster, and less error prone.  with the right tools in place you
may invest some of your time in initial set-up, but your day to day
administration costs should go way down while your overall security goes
way up.  

My Dad always says "A good workman never blames his tools."
To which I reply "Because a good workman always uses good tools - that's
a big part of what make him good."  :)  (OK, I'm wordier than Dad, but
you get my point).

jte

--
John Earl | Chief Technology Officer
The PowerTech Group
19426 68th Ave. S
Seattle, WA 98032
(253) 872-7788 ext. 302
john.earl@xxxxxxxxxxxxxxxxxx
www.powertech.com  
 

--