Top Five Things I’ve Learned in Enterprise InfoSec

As information security professionals, we have an obligation to be more than a figurehead. As a CISSP I am bound by ISC2's Code of Ethics, which requires I provide diligent and competent service. I can hardly call my work diligent if I am approving everything to keep my customers happy...