The toughest security problems have nothing to do with packet sniffing, TCP SYN or the ping of death. Yes, securing your networks and servers is important, but securing against the people who populate that workspace may be even more important. Security is fundamentally about people—those who develop, operate and use your systems. And there are only two types of people—those who have earned your trust and those you haven’t caught yet.