HIPAA... Have you heard of it? Has your IT vendor heard of it? I'm pretty sure that at this point in time you have heard of it. You may actually be very familiar with HIPAA and what it's intended for.

How can your company learn from the U.S. Secret Service's mistakes? Start by developing basic information security guidelines with respect to who can access sensitive data (such as personnel files or other confidential data) within your organization.

"To me, the most frustrating thing is when people treat privacy and security as if they are trade-offs."

the hard lesson learned from this exercise is the ability to identify those people whom I can add to my short list of truly trusted advisors and add myself to my superior's list of truly trusted advisors.