Uses Of Information Security Concepts

Principles of Information Security, Fourth Edition Michael E. Whitman and Herbert J. Mattord Vice President Editorial, Career Education & Training Solutions: Dave Garza Director of Learning Solutions: Matthew Kane Executive Editor: Steve Helba Managing Editor: Marah Bellegarde Product Manager: Natalie Pashoukos Development Editor: Lynne Raughley Editorial Assistant: Jennifer Wheaton Vice President Marketing, Career Education & Training Solutions: Jennifer Ann Baker Marketing Director: Deborah S. Yarnell Senior Marketing Manager: Erin Coffin Associate Marketing Manager: Shanna Gibbs Production Manager: Andrew Crouth Content Project Manager: Brooke Greenhouse Senior Art

In today’s IT world every organization has a responsibility to protect the information and sensitive data they have. Protecting data is not only responsibility of security and IT staff but every individual is involved in protecting the information. The risks to information security are not digital only, but it involves technology, people and process that an organization may have. These threats may represent the problems that are associated to complex and expensive solution, but doing nothing about these risks is not the solution.

The security plan is formulated to protect the information and important resources from a wide variety of potential threats. This will promote business continuity, reduce business risks and increase the return on investment together with business opportunities. The security of information technology is attained by executing a suitable set of control, efficient policies, processes, organization structures, software and the hardware. These given controls ought to be formulated, put into action, assessed, analyzed and developed for productivity, where necessary. This will allow the explicit security and business objectives of the United States Department of health and Human Services to be accomplished (Easttom, 2006, p.32).

Information assurance seeks to secure this information from unauthorized access or use. With our ever advancing technological environment, business are struggling to protect themselves and the information that customers have entrusted to them with occasional mis-steps serving as reminders that one can never be too careful.

It is quite unfortunate that most companies’ management only deals with the administrative, marketing and sales, and the production part of the company business, but felt the IT operations should be left solely to the IT personnel. In the long run, according to this chapter, the information security aspect of the company will suffer and remain underdeveloped because of lack of attention. However, if there is any security breach or attack, the top management will be the first point of contact. The top management will be held accountable and responsible for not adhering to the business practices.

Moreover, now days using information system is not as walking as in the park, it has many new security treats that the company might lose their confidential data, financial and personal information.

The information age is the age we live in today, hence we must make sure that the use of the information readily available to many people is not abused. There are many different types of security threats to the average person, business or even government. The risks faced by individuals and entities are rising, thus measures to avoid these privacy and security breaches would be discussed accordingly assisting and allowing firms to remain, fraud free and protected.

Over the past seven weeks I was giving the opportunity to learn an excessive amount of information on the relationship between technology and society. Technology is rapidly evolving today making our daily operations easier than before. Although technology can be the best thing ever it does come with it drawbacks in certain situations. In today’s age technology plays an important role in our career life. It is used to help us get the job done in a more efficiently and at a faster pace. However, using technology for data storage and businesses purposes can be at risk of being hacked or stolen. Businesses and employees have to make sure they have the best security protection in order to keep their information save. Overall, technology is beneficial

Moreover, information security policies are important in a way that they help reduce the risks associated with employees' acceptable and unacceptable use of the company's information resources. As would confirm Danchev of Windows Security, the first step towards enhancing a company's security is the introduction of a precise yet enforceable security policy, informing staff on the various aspects of their responsibilities, general use of company resources and explaining how sensitive information must be handled and by also describing in detail the meaning of acceptable use, as well as listing prohibited activities (Danchev, 2003). By the same source, a good and well developed security policy should address how sensitive information must be handled, how to properly maintain your ID(s) and password(s), as well as any other accounting data, how to respond to a potential security incident, intrusion attempt, how to use workstations and Internet connectivity in a secure manner, how to properly use the corporate e-mail system (Danchev, 2003).

The security plan is formulated to protect the information and important resources from a wide variety of potential threats. This will promote business continuity, reduce business risks and increase the return on investment together with business opportunities. The security of information technology is attained by executing a suitable set of control, efficient policies, processes, organization structures, software and the hardware. These given controls ought to be formulated, put into action, assessed, analyzed and developed for productivity, where necessary. This will allow the explicit security and business objectives of the United States Department of health and Human Services to be accomplished (Easttom, 2006, p.32).

Ultimately, any business that wants to protect and secure information on their computer systems should implement these aspects of computer security. Without computer security, a business could easily fail by just taking its first steps into e-commerce or any participation within the web.

The business world is increasingly dependent on technology to supply information and communications facilities to staff, partners, and customers. Securing organizational information and the systems that are used to manage and transmit data has become a high profile function. Failure to secure information can have a severe impact on business

Technology has grown tremendously over the past few decades. Everyday businesses, governments, and everyday people rely on technology for things from banking to communicating with loved ones and business associates. Disrupting this technology can cause major losses monetarily and in the sense of information. According to Information Security Curriculum Creation: A Case Study, “A survey of undergraduate degree programs in Computer Science, Information Technology, Management Information Science, and others show a lack of emphasis on security issues in their curriculum.” There is a strong need to secure and protect information for many, many reasons and as such it is important that an undergraduate curriculum provides a comprehensive approach to teaching information security concepts to its students.

The best time to get people informed about the importance of information security training is not when technology were mainly assessable for the top class people in the society, but now that almost everyone has the most sophisticated tool right in their hand. Technology has transformed completely, and several things have changed from how it used to be in the 1990s. Now that more and more people are relying majorly on technology for most of their work and data storage, it is important to take a critical look at information security and why we need to acquire the necessary skills needed to secure our personal information.

Over the years, our team of security experts have published a series of articles regarding information security, and also created many awesome video courses, which are highly valuable in tackling the information security challenges.