Just come across this entry in Slashdot, about a book on managing information security in a corporate environment. What's revealed in the review, and also many comments that are posted are interesting. They remind me of my life in a multi-nationals bank previously.

Quote

Slashdot | How to Cheat at Managing Information Security
</div>