Limitations of best practices©

• Best practices are

  • effective ways to approach improvement in a critical
    organizational activity, like security

• Best practices ARE NOT

  • a substitute for an actively planned and managed
    process