Security best practices

摘要

Best security practices don't exist. If they did, the company implementing them would be spending too much money trying to secure its information, and worse, more than likely stopping the business from operating. The best practice an organization could do is to evaluate its risk, comply with applicable standards at the minimum level required, and implement just enough control to achieve that state.