The beginning of any effective information security effort is management support. Management can provide an obstacle to security policy: without it, policies, processes, and controls (if you can get a budget approved) are just window dressing, meaningless components of attempts to pass audits or impress investors. (This article is updated...