>It's interesting how the level of technical expertise of an organization's >members seems to have almost no bearing on how sophisticated the >organization's infrastructure is.
Speaking as a long time internal and external IT auditor I would suggest there is a bearing and it's inverted once you exceed a certain organizational size and discount the outliers (mom&pops on the low end, national security systems on the high end). It's also best applied to industries or sectors, not individual organizations. It's the standard do as I say, not as I do / who watches the watchers / ugly baby syndrome problem. Of course that is anecdotal but conversations with peers over the years seem to bear it out. -Peter _______________________________________________ cryptography mailing list [email protected] http://lists.randombit.net/mailman/listinfo/cryptography
