Lead from the top

摘要

End-users' poor management and awareness of IT security mean that information security threats are everywhere. Many will reveal their passwords to complete strangers, as researchers for the Infosecurity exhibition and conference discovered when accosting commuters at London's Waterloo Station as part of their annual study. Effective management must start at the top, with a security policy, says Jason Creasey, head of projects at user body the Information Security Forum. Of its 270 members, nearly one-third are in the UK, including all the big banks, British Airways, Ford, ICI and Tesco. "Achieving an effective and consistent standard of good practice throughout the organisation requires clear direction from the board," Creasey says. "Top management must establish direction and demonstrate commitment.