mailing list archives
Re: security not a big priority?
From: "Francois Yang" <francois.y () gmail com>
Date: Thu, 15 Feb 2007 10:14:28 -0600
Definitely DO NOT look for another job. It sounds like you're being
presented with a huge opportunity. I'd recommend implementing some sort
of HelpDesk or Priority list so that you can keep track of your tasks.
I'm not sure what you need the Network Engineers to do, however push
forward. Apply pressure on their team to do their part. Try to identify
the steps involved in completing each task. It may be easier to
complete one task if another is already resolved. Your boss may not
know much about security, but frankly, he/she may not need to. That's
what you're there for. Step up to the plate and take control of the
situation. Use your boss for guidance, but you should really take the
helm here. It's been my experience that management support is key. If
you can get the support of your boss and his/her peers, then they can
assist in getting the other teams to work with you.
Again, it sounds like a great opportunity and although it may be
overwhelming at first, persevere and you will be better for it. Good
You're right it is overwhelming. The problem with the boss not
understanding how big of a deal this is, causes him not to give me
full support. And that's one of the problem.
You have to remember his roles is to support the network operations.
So his first priority is network operations. And anything else like
security which requires redesigning the way things are done or making
them do things they never did before. (like following policies) is a
big challenge. I've created a list of things that needed to be done
with their priority and even put comments on how it can affect us and
other things. I need the other engineers to work on some projects.
Since I'm not the one who maintain the servers or services, I don't
want to try to make changes to the systems. But yea, I'll just have
to keep bugging my boss about it.
If you think technology can solve your security problems, then you
don't understand the problems and you don't understand the technology.