Finally, once you have a good staff, keep them well trained. Continuous education benefits everyone. Perhaps the single most important principle we have found in the security industry is that known vulnerabilities account for most of the security breaches we all face. For this reason, systematic approaches to strengthening security all insist on keeping technical staff up to date on known vulnerabilities. Must Not Be Shelfware Security policies naturally cover many different aspects of operations.
Physical security requires adequate safeguards to prevent intrusion into restricted areas.
However, continuing to rely on passwords for high-security applications is unwise. Setting the parameters properly on operating systems, firewalls, intrusion detection systems, and system logging is essential for security. Security specialists often find that many customers entering the security analysis process have used default settings instead of choosing parameters that reflect their security policies. Logging enables forensics destination and possible prosecution. All of these elements are valuable in today's environment.