from the book

“People, facilities and security skills are important parts of the security trail and are directly under the control of your organization. Employees, officers and service suppliers should have compartmentalized and audited access only to data assets relevant to their immediate duties. Their backgrounds, integrity and loyalties should be investigated on a level corresponding to the value of the assets they have access to and the amount of damage they could do by abusing that access. People with poor internet and data skills are as dangerous as people who can abuse access to data assets. An”