As I said in my presentation at last week’s Security Solution Forum 2006, there is no point in establishing rules that cannot be followed (because doing so would make it impossible to achieve the required operational efficiency). This article says much the same thing. It expresses exactly what I have been thinking.
“There is no point in strengthening security in ways that make extreme sacrifices in efficiency, such as prohibiting employees from taking notebook computers off-site.” So says Masahide Kono, Manager of the IT Management Office at Asahi Facilities, which provides comprehensive building management services for the Takenaka Corporation Group. “Creating and complying with rules are indispensable to security measures, but if you create rules that greatly reduce operational efficiency, some employees will inevitably violate them in secret. If the rules will not be followed, it makes no difference whether they are created at all,” he says.
(Source: Nikkei IT Pro Enterprise)