Rogers Weblog - You know you are a security professional when ...
As most IT security professionals are overly cautious, this light-hearted list of concerns from a fellow MVP and friend is excellent.
... and yes, I follow many of these "best practices" myself 
http://weblog.infoworld.com/securityadviser/archives/2008/06/are_you_a_compu.html