Security Remediation in Practice
Here's a nice write-up by Albert Caruana (Malta) on what can happen if IT security arrives on the scenes (read: is introduced) in the real world.. sometimes. One of the passages I like best reads:

"This non-ideal cycle can be depicted as the following sequence of attitudes:

• The wildebeest theory
• The trigger incident
• The first security audit
• Knee jerk reaction
• Reactive mode
• Sobering down
• Slowing down
• Picking up again
• Prophylactic mode"


It's a really good read.  ¶ permanent link