Social Networking
Riding the social media wave
Friday 26 September 2008, 1:15 PM
Getting To Grips With Data Security
Following the recent number of high profile data losses, we’ve seen information assurance moved up the agenda from IT department to boardroom by those organisations which understand that information has become one of the modern currencies of society.
The ability of disillusioned employees, ex-employees or groups of activists to damage an organisation by taking, deleting, altering or otherwise misappropriating the critical business information of the employer and either passing it to a competitor, or simply using it for their own ill-gotten gains, is now a very real issue.
When the office was the only place we kept business information, life was straightforward - to secure information we emptied our Recycle Bin, did a bit of shredding, closed and locked the office door. Today we expect and need to have information in a wide variety of locations and with this increasing mobility we now have a critical need for improved security if we are not to allow others to gain access to our information inappropriately.
Today, therefore it is critical for any information assurance system to be grounded firmly in the business world and this means that it is not an issue only for the IT manager or the security officer but for the whole company. Any person employed to control your organisation’s IT infrastructure really needs to read up on information security principles, information risk, information security framework, and information security controls. Only then can your company feel safe when its PCs are powered down and its doors locked at the end of the working day.
* Source: Lots
PreviousComments on this post
This comment has been deleted at the users request
I whole heartedly agree with all of the above, but....there does seem to be a number of small business out there that have an IT something or other, and act very disintrested, or will speak in terms that the staff won't understand. Unecessary arrogance afoot me thinks, this has left a gap for others (like myself) and explain how to lock down systems, and get things really secure. As I mentioned in my blog, even with fully paid up security software running, there isn't one machine that I have come across yet without silent trojans running in the background. So great if the IT dept is geeky and knowledgable, but I think that this is too often not the case. It's as if people have got there certificates or whatever, and then once they have found themselves a job, just gone to sleep.
