A good read on how to suck at information security. I can recognize a lot of the bullet points in the organizations I have seen and even warned them for a fair number of those.