Should organizations separate technical from administrative security?

Should organizations separate technical from administrative security?

Should organizations separate their networking technical security from administrative security? I wanted to know your thoughts and experiences with organizations who decide to separate their technical security (routers, firewalls, antivirus)from their administrative security (user account management, change management, physical and logical access control, etc.). Would you recommend a blended approach or do you see these areas as something that can or should be totally separate?

    Requires Free Membership to View

    Login

    By submitting your registration information to SearchNetworking.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchNetworking.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

My preference is to separate up activities as much as possible. With that said, some HR departments might be happy to not have to see or work with their respective IT departments. There is a certain advantage from HR, IT, and other departments working together even when processes are separated as much as possible.

This was first published in August 2009