Critically Evaluate the Importance of Information Security

Cyber security threats change quickly as Internet increases, and also the related dangers are getting to be progressively international. Being covered against cyber security threats requires almost all end users, actually the most complex versions, to know the particular threats in addition to enhance their particular safety measures with a continuing foundation. On April 28, 2014 President Obama has declared that the “cyber threat is one of the most serious economic and national security challenges we face as a nation” and that “America 's economic prosperity in the 21st century will depend on cyber security.” The internet enables and also helps people in a many ways and a example is collect, store, process huge amounts of data, which includes vulnerable data of small business, transactional and personal. Everything in this world is based on internet now a days.

Security refers to the capability of a system to prevent unauthorized access of personal information of customers. The system must be secure from hackers and phishes who may access customer information illegally. Customers will only do online services if they trust the site and only if they are assured of confidentiality of their personal data like credit card details when paying for the stylist

In today’s IT world every organization has a responsibility to protect the information and sensitive data they have. Protecting data is not only responsibility of security and IT staff but every individual is involved in protecting the information. The risks to information security are not digital only, but it involves technology, people and process that an organization may have. These threats may represent the problems that are associated to complex and expensive solution, but doing nothing about these risks is not the solution.

I am Professor Kirk Mooring and I will be your instructor for this class. In this class, you will learn the fundamental core theories of information and network security. In this course, you will learn and use technology skills that are in demand in today’s job market. With so many threats and vulnerabilities created daily that we have to learn to work as a team in order to protect our data with the appropriate security safeguards. You will study the concepts that will help you evaluate and mitigate risk by selecting the appropriate security controls and technologies.

Research Objective: The main theme of this research paper is to protect sensitive information that any organization or business possess. With community’s increasing reliance on information systems and technology there is scope for security breaches, more likely to happen. Not only monetary loss it can create damage to information assets that has sensitive data. To secure these assets from any internal or external damage organizations has to follow proposed rules and guidelines. Also security responsibilities

Numerous association and organizations in this world, including government and military store a lot of secret data on PCs and send essential information around the world to different PCs. With programmers out there, there ought to be an extraordinary level of security to ensure these information and individual data. As indicated by senate insight authorities, Cyber attack is one of the main dangers in the country so this needs to compass consideration.

The ability to manage information plays a critical role in developing a firm’s capabilities in customer relationship management, process management and performance management (Mithas, 2011).

Security – the status of minimizing factors in reducing the chances of being affected by a threat, breach, or any mitigated circumstances that may disrupt the integrity, availability, and confidentiality of the organizations assets.

Confidentiality: The property that information is not made available or disclosed to unauthorized individuals, entities, or processes.

An issue is described as a matter that is in dispute where unique perspectives are held in regards to what should be done (Sexty, 2017). One of the main issues that still plagues TD is data security and privacy. As a financial institution that heavily depends on telecommunication, the impact of a data breach could potentially be catastrophic. Examples of a negative impact include unintentional releases of confidential information or financial loss all deteriorate the public trust and sustainability of the bank (Corporate Responsibility, n.d.). However, it is evident that disaster can strike at any time. No matter how much security is implemented, a hacker just needs to find one way through and that is exactly what happened to a credit company called Equifax. Hackers were able to “break an Equifax online tool and access personal data of more than 143 million customers” (Wattles and Larson, 2017).

In today’s world information security is extremely important; this is due to the fact that everything in everyone’s daily life is somehow connected to the internet in one way or another. It is of the upmost importance that the information stored on servers throughout the world be protected at all times. Globally, people of all walks of life have personal information stored on servers, whether it be banking information, social media information, phone numbers, addresses, etc. all of this personal information must be secured. The basic concepts of securing data would lie within the CIA triad. The CIA Triad stands for confidentiality, integrity and accessibility. With confidentiality, this ensures that the data be encrypted and not made available to an unauthorized individual. Integrity of information means that the data be accurate and not allowed to be changed in any way without proper credentials, this ensures the data stays intact without mishandling or corruption. Lastly, accessibility is making sure the data can be retrieved by an authorized individual in a dependable and timely manner also, to ensure the information systems are reliable.

The government and organizations are to comply with security laws and regulations in order to fully operate and maintain protection of information systems. Some of these security laws and regulations may vary for every industry and with some organizations; however, implementing security standards with a broad in scope provides reliable reasonable security. In many cases reasonable security implemented throughout the information system can include a high-level of protection in the operation of government and organization systems. There are best practices and risk management frameworks tools to consider when providing a higher level of security in the performance and protection of information systems. It’s key to maintain effective security policies that are fulfilled by security standards and tools to help manage the protection of the information systems.

The database is the heart of any company or organization; this is the one place where vital information stored. Data security is known to be one of the most critical components of business, banks, and even home computers (Coy, 1996). Most of our information such as client information, payment information, personal files, bank account details, etc. these information’s can be hard to replace and

Good security management requires risk management to mitigate or reduce risk to an acceptable level within an organization. Security management’s objective is to protect the company and its assets. A proper risk analysis will identify the company’s major assets, threats that put those assets at risk, and estimate the possible damage and loss a company may endure if any of the threats were to become real. With a good risk analysis, management can determine the type of budget they want to set to mitigate threats. Risk analysis justifies the cost of the countermeasures against the threats and determines the benefit or worth of security

Safety of information is the most valuable asset in any organization particular those who provide financial service to others. Threats can come from a variety of sources such as human threats, natural disasters and technical threats. By identifying the potential threats to the network, security measure can be taken to combat these threats, eliminate them or reduce the likelihood and impact if they should occur.