Today, nearly all companies use information security to protect its information, data and intellectual assets. Sometimes, requirements of additional investments for improved information security become a common debate among Executives and Board, and the discussion always focused on the necessity of identifying what is optimal v/s required investments to reach to the optimal level; there is no single answer to this.
No organization on this earth can become 100% secured from the every possible threats from intellectual intruders (external) or from disgruntled employee (internal). Every organization must identify its own ability to accept certain level of risks that may guide to define organization’s optimal level of information security needs and related investments. For example, banks and financial institutions must deploy higher level of information security processes, procedures and systems than a company that markets other’s products......
The field of information security has grown and evolved considerably during the recent years. As a career choice there are many ways of gaining entry into the field.
Institutions from various walks of life including the governments, military, financial institutions, hospitals, and private businesses collect and assemble a great deal of confidential information about their employees, customers, products, research, and financial status. Most of this information is now gathered, processed and stock piled on electronically. It has become very critical requirement for every such institutions, organizations to protect confidential information is a business requirement, and in many cases also an ethical and legal requirement.
Useful Links:
searchsecurity.techtarget.com
boran.com/security
informationweek.com/security
gartner.com/2_events/conferences
scmagazine.com
sans.org