The Security Mentor

The four-color brochures are mouthwatering, the salespeople are persuasive, and the press tells you that you need more security gadgets and software.

Odds are that you'll get more value from boring operational changes.

That's the message (and I agree with it) of this Infoworld column by Roger Grimes. Some of his advice is too vague ("review e-mail security policy") but most of it is as practical, cost-effective, accurate (and tedious) as telling you to floss your teeth every day. You should start with testing that your backups are working and with his suggested inventory of installed software.