Introduction. The Forefront And Need Of Information And

Cyber security threats change quickly as Internet increases, and also the related dangers are getting to be progressively international. Being covered against cyber security threats requires almost all end users, actually the most complex versions, to know the particular threats in addition to enhance their particular safety measures with a continuing foundation. On April 28, 2014 President Obama has declared that the “cyber threat is one of the most serious economic and national security challenges we face as a nation” and that “America 's economic prosperity in the 21st century will depend on cyber security.” The internet enables and also helps people in a many ways and a example is collect, store, process huge amounts of data, which includes vulnerable data of small business, transactional and personal. Everything in this world is based on internet now a days.

In today’s IT world every organization has a responsibility to protect the information and sensitive data they have. Protecting data is not only responsibility of security and IT staff but every individual is involved in protecting the information. The risks to information security are not digital only, but it involves technology, people and process that an organization may have. These threats may represent the problems that are associated to complex and expensive solution, but doing nothing about these risks is not the solution.

In today’s modern society, to which a well-developed information technology has been applied, it is getting more and more inevitable to use it in our everyday life, since people can store and access to their private information in one place without difficulty. However, this is also the danger of it, as it has become much easier for a third-party to collect and steal information online. Consequently, many cautious company and institutions are aware and well prepared for the potential cyber data hack attacks. (Bennett, 1992)

Research Objective: The main theme of this research paper is to protect sensitive information that any organization or business possess. With community’s increasing reliance on information systems and technology there is scope for security breaches, more likely to happen. Not only monetary loss it can create damage to information assets that has sensitive data. To secure these assets from any internal or external damage organizations has to follow proposed rules and guidelines. Also security responsibilities

Deploying the right security products – IT security today has a wide range of technologies that are aimed specifically at lowering risks and threats.

The framework provides a roadmap for the implementation, evaluation and improvement of information security practices. An important feature of the information security governance framework is that it defines the roles of different members of an organization. The framework specifies what corporate executives, senior management, and CIOs/CISOs should do. The framework is also flexible enough to apply to different business models. The framework benefits are it identifies cornerstone security practices that nearly all organizations are following and makes recommendations where in an organization the responsibility falls. Some disadvantages to BSA's framework is that it is still a work in progress and it still needs to develop useful metrics that enable managers to quantify the return on investments in information security and the effectiveness of information security programs and measures (BSA).

At this stage in evolution, society cannot escape its dependence on information technology. The need to protect sensitive data will continue as long as this persists. Amazingly, a recent poll of 4,100 enterprises revealed that 70-percent didn’t have a contingency plan for cyberattacks. The firms reported that they had the resources to purchase what was needed to secure their networks, but couldn’t find trained specialists to deploy the

While cybercrime has boomed, cybersecurity took longer to get off the ground. Information Security has now become a business-wide concern. Due to the way information technology has spread in all aspects of our lives, it is imperative that organizations implement information assurance policies and procedures in all approaches. Support and authority must start at the upper levels of the organization and move down to the actual level where the work occurs. The decisions must consider what the risks are, the best way to implement the policies and procedures, where the organization is heading, and the people impacted – to include employees, partners, and customers. Upper management must support the activity and give those who will be developing the program and procedures, the authority to investigate and implement to reduce risk.

Cyber security must be an aggressive and evolving practice. Not only is it important to put security in place for current technology that can access electronic information, but also to look forward to future trends and strategies. Methods must also be developed that will continuously protect information regardless of growth and technological advances. As trends change and new technology develops it is the responsibility of businesses to balance cost saving measures with adequate security measures.

Whitman, M. E., & Mattord, H. J. (2014). Management of information security (4th ed.). Boston, MA:

Security in the age of internet has become a tremendously important issue to provide comfort not only for paranoid people but for many others who are naïve to believe that protection in digital era is essential to communication between millions of people that increasingly used as a tool for commerce.

Information security is often still playing in companies only a minor role. Many companies neglect aspects such as system misuse, sabotage or even espionage. But by now the reality has caught up with them. Straight from abroad there are more hacker attacks and espionage by competitors. Therefore, the law requires different approaches before to ensure information security. Companies must for example ensure that their information-processing systems are protected and kept safe.

In recent years, Cybercrime has increased radically and it is becoming more vital for people to grant protection on their computers and data just as they do with anything else they deem needs to be secured. The improved rate for the need of security also applies to conceptual institutes of small businesses. Small businesses keep record of client, personal, product, and explicit company finance information and data. With this wealth of information and the increase in cybercrime, small businesses need an effective solution to defend their computer systems and data from cyber-attackers.

Governments, organizations and companies co-operate to secure cyber space. In fact, the prevention of cyber criminal activities is the most critical aspect in the fight against cyber crime. It’s mainly based on the concepts of awareness and information sharing. A proper security posture is the best defence against cyber crime (Paganini, Perluigi, 2014)

Safety of information is the most valuable asset in any organization particular those who provide financial service to others. Threats can come from a variety of sources such as human threats, natural disasters and technical threats. By identifying the potential threats to the network, security measure can be taken to combat these threats, eliminate them or reduce the likelihood and impact if they should occur.