At my current job, some of my duties are related to security.
I know security and usability are inversely proportional, and because of that I have tried very hard to find the proper balance.
I have also taken care of documenting everything properly, both for the end user to whom these policies may apply and for future systems administrators that may work in the same position.
The problem I am having and failing at solving is the following:
Some coworkers whose access privileges are equal to mine, can disable these security policies at will if they feel uncomfortable with them - or, more frequently, if they do not know how to work under such restrictions. I have repeatedly elevated my concerns to my supervisors with regards to this issue, but the problem persists, basically because management is failing at enforcing their own security policies and raising the staff's security awareness.
The question is: what do I do? It seems wrong to me that management is less worried about this than I am.
This problem is important enough for me that I am thinking about quitting this job.
sudo
.