I was contacted to publish an article in the for pay magazine Business Communications Review regarding security controls with some depth but not drilling down too deep in any technology. The result was a two issue series (I couldn't get trim it down enough for a single article) that is referenced on their blog here.
As research often uncovers the real solutions to security lie in process, policy and governance but we often resort to technology since that is frankly easier to deal with.
