itauditsecurity.wordpress.com
Why People Don't "Do" Security
Lenny Zeltser, of the SANS Internet Storm Center, posted his Three Laws of Behavior Dynamics for Information Security. These laws describe why people follow or don’t follow new security initi…