You might understand...I'm one of only a few security people in a large company. Talking to other employees just doesn't cut it because I'm enemy no. 1 right now.

We didn't have much security at all and now (SOX, HIPAA, etc) we have to implement changes. The first few are password protected screensavers, blocking IM. These bastards are going balistic and we haven't even done the major changes yet like expiring passwords every 60 days. Everyone has listened to their evening news and now is a identity theft expert.

Our department relies on identifiying risk and remediation based on Business needs. We don't implement things that will impact production. Hey, we don't want to be irritating to everyone for our enjoyment! It would be helpful if we had visable Executive support but they just let me take the brunt of the complaints. They are OK with our changes but they keep quiet about it. I know that's the business I'm in but some days my wine collection dwindles down faster than normal.

Whew, thanks for listening. I just need to talk to people who have probably been there too.