CHAPTER 15 Policies, Procedures, and People The idea behind this chapter is to examine the people who work for an organi- zation, and how to protect their privacy, while still protecting your infrastruc- ture from them ! Environmental controls, policies, and procedures can help to protect legitimate individuals and help protect the infrastructure from malicious individuals and social engineers. This is the last chapter of actual objective content for the Security+ exam, but you will no doubt see several questions on the exam about these topics. The concepts covered in this chapter are a bit of a hodge-podge, covering concepts less about computers, and more on the periphery of technology security, but I have tried to line them up in a way that will make for easy reading and recall.