There are some cracks in the cornerstone of information security

Information security professionals have a problem. The foundation for building an effective security strategy includes having a security policy. The value and importance of this tool are expounded upon at every security show. The need for a security policy is mentioned in almost every security related guideline or article that is published. Even a number of vendors' security products are designed to support an organization's security policy. Yet there is a marked trend within the information security industry that shows its use is diminishing. The results of the Security Issues Survey Datapro has conducted every year since 1991 show the decline. The annual survey examines which security concerns and strategies security-conscious managers used within their organizations. The results of the survey are examined, focusing on the use of security plans by security professionals and what areas are being addressed within the plans.