An Extra Measure of Security

You can load up on hardware and software to safeguard the company's information systems, but without properly trained and certified technology staffers, you're just throwing money out how much should you budget for security training and certification for your technology staff?

M. Angela Sasse, a professor at University College London who specializes in security, recommends top-to-bottom training in an information-technology department - and higher in the organization. "There has been a tendency to delegate security to specialists," Sasse says. "But things change all the time. Sometimes the experts are necessary, but overall you can't delegate. People who are running the business …