I read an interesting article today by Bill Brenner over at SearchSecurity about how network configuration can affect network security. You can read the article: here While this topic is somewhat parallel, the article got me to thinking about how many times we focus on what we have to do with regards to security vs. what we should do. Nearly every day I hear someone talking about the extra work that SOX or HIPAA has caused them and I see them focusing much of their time, especially with regards to security, in these areas. It's gotten so bad that many people think that the terms...