Dynamic and appropriate policies involving representatives of the entire organization are essentials for effective security. A sensible approach is to use existing templates and to adapt the details to specific requirements. As policies are developed and evolve, they must be disseminated throughout the work force, from management to clerks. Ongoing security awareness programs and periodic re-evaluation and adjustments of policies should be planned, budgeted and implemented. Even the most expensive computer security hardware and software will be useless if employees cannot or will not use them properly.
Security depends on adequate training, motivation, and monitoring.
Violations of security policies should be treated seriously, but it is equally important to reward compliance. Security specialists should work closely with human resources and the legal department to ensure adequate background checks on all job candidates. A particularly helpful step is to arrange interviews of candidates by their future. Supervisors must keep in mind the importance of noting any change in mood or behavior of their employees and to respond in a supportive, professional, and non-intrusive way. When employment terminates, security considerations dictate a firm and even-handed response for all employees.