Computer Security

Paper Summary:

The paper reveals that technology is not enough to protect information systems; the business must have an information security advocacy and awareness program for process owners and users and a strict implementation and enforcement of policies. The paper stresses how there must be policies in place to ascertain that standards and benchmarks are aligned with organizational goals and objectives. The writer then discusses his organization and how it performs risk assessments. The writer emphasizes that corporate officers and staff in this business know that information security is one of the vital resources and attitudes needed to keep the company afloat and ensure a full protection of their information systems.

From the Paper:

"Business and business processes are the lifeblood of any organization. Whether the enterprise is engaged in a for profit or not for profit venture, its core competency (i.e. for schools, it is teaching; for an accounting firm, it is its financial management capabilities) is the epitome of its existence thus the continuing survival is dependent on the sustained operational capabilities. But core competency alone does not protract business survival; rather there are business drivers that directly or indirectly support the business."

Sample of Sources Used:

• Bowen, Pauline, Hash, Joan and Wilson, Mark. (2006, Oct.) NIST Special Publication 800-100 - Information Security Handbook: A guide for managers. [Online] Retrieved Oct. 26, 2007 from the NIST database on the Website: http://csrc.nist.gov/publications/nistpubs/800-100/SP800-100-Mar07-2007.pdf.
• Brewin, Bob. (2006, May 29). VA officials ignored security warnings. [Online] Retrieved Oct. 26, 2007 from the fcw.com database on the Website: http://www.fcw.com/print/12_19/news/94665-1.html.
• Hines, Matt. (2006, Jun. 21). Study: Most technology companies have data losses. [Online] Retrieved Oct. 26, 2007 from the eWeek.com database on the Website: http://www.eweek.com/article2/0,1895,1979919,00.asp.
• ISO/IEC. Information technology - security techniques - code of practice for information security management (ISO/IEC 17799:2005). Geneva, Switzerland: ISO Copyright Office, 2005.
• ISO/IEC. Information technology - security techniques - information security management systems - requirements (ISO/IEC 27001:2005). Geneva, Switzerland: ISO Copyright Office, 2005.

More papers on Computer Security:

• Term Paper # 1053 : "Computer Security in the Business World"
• Term Paper # 111633 : "The Computer Security Industry"
• Term Paper # 98791 : "Computer Security"
• Analytical Essay # 140242 : "Computer Security Breach Scenario"

APA Citation:

MLA Citation: