I came across a great post on what you should think about when setting up your information security plan in the A Day in the Life of an Information Security Investigator blog.  I especially agree with his first suggestion about having a security buddy look at your plan.  Its always said that two heads are better than one.  This is definitely the case with security.  You should never become too arrogant to think that you’ve thought of everything.  Another person can give you a new perspective.

I just read that the two things you have to be careful of when thinking about security are hackers and lawyers.  Hackers start the problems, but lawyers make you pay for them.  The more input you have, hopefully the better you are secure against each and maybe the better you are able to get the most out of the money the organization has available.