Five basic mistakes of security policy

(http://antbsd.twbbs.org/~ant/wordpress/?p=1164, May 8th, 2008)

Source: Five basic mistakes of security policy

1. Not having a policy
2. Not updating the policy
3. Not tracking compliance with the policy
4. Having a “tech only” policy
5. Having a large, unwieldy policy