7 Mistakes of IT Security Compliance - and Steps to Avoid Them

The document discusses 7 common mistakes made in IT security compliance including: decentralized policy management, failing to establish a common definition of compliance, treating compliance as a tactical issue rather than strategic, failing to test solutions before implementing them, seeing audits as a nuisance, lacking buy-in from administrators, and being unaware of hidden costs of compliance solutions. The document provides examples and effects of each mistake and recommends centralizing policy management, establishing common definitions, taking a strategic approach, thorough testing, viewing audits positively, gaining administrator support, and understanding total solution costs.