Steve talks about the challenges of corporate IT security policy and enforcement and the inherent tension between IT security staff and employees.