New Paper: "Security policy in the age of compliance"

Another fun read in the "... in the age of compliance" series on ComputerWorld: "Security policy in the age of compliance."

"In my previous articles, I have covered specific topics (log management, incident response, intrusion detection, and computer forensics), but now it's time to take a step back and look at the forest rather than the trees. Those specific subjects are all covered by the same broader umbrella: the corporate security policy." (read more)