LAST SLIDES

• The NEED for Security

  An organization needs information security for four important reasons:

  ❖ To protect the organization’s ability to function;

  ❖ To enable safe operation of applications implemented on organization’s IT systems;

  ❖ To protect the data the organization collects and uses; and

  ❖ To safeguard the technology assets in use at the organization.
• The Dilemma of Computer Security

  The problem that we cannot get away from in computer security is that we can only have a ‘good’ security if everyone understands what security means and agrees with the need for security.
• Security is a social problem, because it has no meaning until a person defines what it means to them. The harsh reality is that, most users have little or often no understanding of security. This is our biggest security hole.
• When considering security, it is important to realize that it is impossible to obtain perfect security. Security is not an absolute. Instead, security should be considered as a balance between protection and availability