Threats to the enterprise are varied and complex, but the biggest threat of all is complacency. The first step toward safeguarding information from harm is recognizing that threats exist and deciding that information warrants security measures. And half-hearted security measures are worse than none at all; an inadequate security system not only fails to keep out threats, but also offers a false sense of security to the organization. Naïve employees also can cause real problems: many users find security procedures irritating and ignore them. To mitigate these growing threats, think first about following a process, assessing and determining risks and designing a security policy. Only then should you begin building a security architecture based on the policy and looking for tools that are aligned with it. And make sure you're constantly changing and monitoring the security policy and system in accordance with changes in the external environment and the business model that it follows. Adopt the best practices in the industry but keep your requirements in mind. Security solutions should be custom-built and very specific to your business' needs and infrastructure.
Learn more about network security for the 21st century:
- read the article [1] at CIO
Links:
[1] http://www.ciol.com/content/developer/SecurityZone/2007/107051002.asp