| "Ignorance of the law is no excuse"
It's true that if you are caught speeding, you will likely receive a ticket. If you are caught on a beach that you thought was a nude beach, you may find yourself arrested. And, should you argue that you didn't know any better, you will be told the same thing; "ignorance of the law is no excuse". Likewise, in a Corporate, Military or related environment, you can be administratively or legally punished for violating rules of which you were not aware. But of course, this assumes that the procedues and policies were established in the first place! The employees/members and the OPSEC Professionals each share a similar burden. It is the employee/member's responsibility to educate themselves on policies, procedures and best practices. It is the OPSEC Professional's responsibility to document the policies, procedues and best practices (where appropriate), and to make every effort to make others aware of them. Only working together can an organization have the slightest chance of security. |