#RSAC: CISA Outlines Bad Practices Every Organization Should Avoid

http://www.infosecurity-magazine.com/rss/news/76/application-security/

Some IT practices are more dangerous than others, according to CISA