Читать книгу You CAN Stop Stupid - Ira Winkler - Страница 40

To prevent and mitigate UIL, you have to acknowledge it for what it is: pervasive and natural to your organization. Some categories of loss lend themselves to preventing the potential attacks from reaching users. Some attacks are clearly intentional, and the only way to prevent them is to remove the capability of the user to cause the loss.

Sometimes awareness alone can mitigate a particular loss, but in all likelihood the loss will only be mitigated through a layered approach of countermeasures. This unfortunately goes against much of the current hype that users are your first and last line of protection and that awareness is a silver bullet that will stop user-related losses. Again, awareness is a tactic, and solving UIL requires a comprehensive strategy.