Security is everyone's job. Even security's. In many cases, it's as simple as each user displaying common sense. In other cases, a specific portion of the company is tasked with the responsibility of wrapping it into a nice, neat package. Policies, procedures, lockdowns, software selection/protection, assessments, and scans. That's well and good, but the performance levels of most facets of a business are easily identifiable. If marketing isn't doing their job, there will be no new customers. If accounting isn't doing their job, there will be tax audits and budget over-runs. If security isn't doing their job, the gap will be exploited by people who are experts at making sure that no one else knows about it. So who watches the watchers? That's where an external company comes in. Here's some hints on how to find them and how to select one that meets your business needs.

Read more »