Discussion on:

Find and fix these seven security slips

#4 Your security and IT staff is above the law.

Imagine if the members of Congress didnt need to follow the laws they themselves created. That wouldnt work for the country, and it doesnt work for the enterprise if security teams bypass the processes theyve put in place to ensure the organization stays safe.

Excuse me. That's exactly what they do. Congress exempts themselves from the every law they pass.

You should find a better example.

Especially if the reason is "because they're going to do it anyway." People do all kinds of things anyway; we needn't encourage them.

If a a person needs access to something to do his or her jobs, give it to them. Don't provide access to everything someone else needs.

Also, in an environment of password sharing, saying that any individual is responsible for what goes on under his or her credentials is not going to stick.