To get new initiatives done, money talks
For several months now, I have been proactively identifying risks and vulnerabilities within my organization. Some have been easy to fix; I just had to write some new policies, convince our facilities department to issue picture ID badges or replace our firewalls. Others require some heavy lifting. And it can be tough to persuade co-workers to pursue security objectives, especially in a small company with a tiny security staff.