May 6, 2008
This week's entry in the ongoing Q-CERT podcast series features a second interview with Julia Allen, who was interviewed previously in conjunction with her QISF presentation.
In this podcast, Julia offers some practical advice about how to get a handle on information security, covering questions such as "How do I get started in information security governance?" (answer: you don't—governance is not the place to start), "How do I get my staff to use policies?", "How do I make sense out of all the information security standards and guidelines that are out there?", and "What's the single most important thing I can do to improve my security?"