Security As A Business Problem

This is something I've harped on time and again. And I'm not alone on this one. Security is not just a technical problem, it's also a people and a business problem. Technical controls are great, but they can be circumvented by compromising not security tools but people.

Here's details from Computer World about a study by the Ponemon Institute, claiming most employees ignore their company's own security policies. Could that be? Hard to believe but true.