Reading the IMPACT blog piece on circumvention of technical security measures (see post here) made me remember that in the military as much effort is placed upon physical and personnel security measures as well as technical measures. Perhaps the many stolen laptop cases are making us miss a very obvious point – the 7th Data Protection Principle requires adequate technical and organisational measures?