download issue 24 here - Help Net Security

This is not unlike other business operation,
such as offshore software development or
outsourced product fulfillment, where longstanding
benefits of such initiatives are not realized
without oversight and monitoring
authority.
As such, budget debates must focus not just
on what legacy systems to keep and what kind
of security equipment to implement, but also
on the individuals and resources needed to
set overarching policies and management
procedures; the absence of which will mean
that all the money spent keeping up with the
latest tools and systems will be fruitless.
While security tools will also be essential to
keep networks running optimally while protect-
ing sensitive and confidential corporate data,
such systems should not be procured and installed
at the expense of getting the right person
with the right equipment in place to monitor
and respond to evolving issues in accordance
with a well established corporate IT policy.
Companies that successfully thwart a cyber
attack will possess a well integrated combination
of the right tools with the right decision
makers. No single algorithm or detection system
will be enough, if staff members are not
provided the training and tools to do their job.
Make no mistake – people have and always
will matter if organizations are to maintain a
robust security posture.
Max Huang is the Founder and President of O2Security (www.o2security.com), a manufacturer of highperformance
network security appliances for small- to medium-businesses as well as remote/branch offices,
large enterprises and service providers. Max can be reached at max.huang@o2security.com.
www.insecuremag.com 48