Producing a network security policy is the easy part. The hard part is actually enforcing it and managing the constant review process. Security threats never stand still and neither should a company's security policy (Case study: Leeds Teaching Hospital NHS Trust).

A trusted security adviser can help organisations identify and manage the risks, as well as design, implement, monitor, review and amend the corporate security policy in the light of changing threats. But before outsourcing network security can be contemplated, a company and its chosen security
partner have to build up those high levels of trust.

Staff should never feel the impact of a good security policy; all they should ever experience are the benefits.

Scott Nursten