Security is not just a matter of creating a secure system. As long as we, as human beings, have to access and use this system, it becomes our job to uphold security standards as part of our daily routines.
Companies spend millions of dollars on firewalls, encryption and secure access devices, and it's money wasted, because none of these measures address the weakest link in the security chain. - Kevin Mitnick
This does not mean that we should not invest some initial effort in planning and implementing security measurements. It means that security policies, which affect our daily work, should be implemented and upheld as well.
Let's start by looking at the most obvious window of vulnerability–our access security.