15.2. Understanding Network Security Risks
If a new security policy is being enabled within an organization, it is not only the end users who will need to be trained; network and system administrators will have to be trained as well. Because administrators are a vital component of strong network security, they should be trained to incorporate security as part of their daily routine.
End users can be forgiven for ignorance about matters of security, but administrators cannot. To that end, it is important that all systems administrators understand the philosophy behind the company security policy, and what constitutes good security practices.
Security should be a basic tenet of every equipment or software evaluation that is performed. Software ...