Technology is only an enabler, not the solution, to executing a sound security strategy and supporting a well-defined and well-articulated risk management program.

• 从下图1中也可以看出，做好信息安全关键还是在人以及流程啊。