Entries by Peter Weber

What is security documentation?

So, you have been told by an auditor that your security policies and other security documentation are out of date or non-existent. “Okay, so let’s draft a two-page policy and tick that box”. Such glib responses are all too common. This is definitely not an appropriate way to address your organisation’s risk-profile and enhance your […]