February 12, 2009BusinessGerry O'Neill on whether effective information security is about people or technology.