Most security administrators fall so low on the totem pole that even the doorman can override a security policy when it s inconvenient to follow it. This guarantees that the systems will never be secure. Fortunately I can refuse to take a job when hitting this type of management, but most administrators can t because it is their full time job. Instead they are forced to work with their hands tied, creating policies and procedures to ensure security, only to get them over ruled by some PC-World manager who can t remember a password. Security is but a farce in these companies.
Security is a top down procedure.
By the very nature of what they do, the top executives should be the most secure. They should have the most restrictive constraints on any access to their data. If you are serious about security, give your security administrator some teeth. He isn t paranoid. He knows what is happening on your network.