Should organizations separate technical from administrative security?

Should organizations separate their networking technical security from administrative security? I wanted to know your thoughts and experiences with organizations who decide to separate their technical security (routers, firewalls, antivirus)from their administrative security (user account management, change management, physical and logical access control, etc.). Would you recommend a blended approach or do you see these areas as something that can or should be totally separate?

    Requires Free Membership to View

    Login

My preference is to separate up activities as much as possible. With that said, some HR departments might be happy to not have to see or work with their respective IT departments. There is a certain advantage from HR, IT, and other departments working together even when processes are separated as much as possible.

This was first published in August 2009

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top