Data Gathering ◾ 121
© 2011 by Taylor & Francis Group, LLC
At this point the customer decided that he needed to rethink his entire business process and
ultimately decided to change the direction of the company to supplying information to doctors on
medical procedures. It is not that such a business should not be tackled, but that it should be well
planned. It is important to identify the assumptions, obstacles, and requirements of the endeavor
during the planning stage in order to properly plan and budget the project. Ignoring this type of
planning does not make obstacles go away; it only postpones them until they surface painfully.
A security policy is not only a statement of the organization’s security rules, but also a plan for
behavior ...