Overview

It is second nature for physical businesses to protect their premises, people and assets. Locks, reception areas, guards, badges, cameras, and access procedures all contribute to the security posture of an organization. A smart CEO will mandate that a factory or office is properly alarmed, that employees are trained in the event of an emergency, and that valuable property is monitored.

Similarly, anyone who conducts business online must be aware of risks to their virtual assets posed by malicious users, improper administration, and random unforseen events. A smart CIO will ensure that network users are properly authenticated, intrusion logs are monitored, and that proprietary data remains undisclosed

Comprehensive system security will address all of the following:

Plan - architect your network and applications with security in mind
Protect - implement firewalls, intrusion detection, policies and procedures
Respond - audits, vulnerability scans, penetration testing
Review - audit log files, forensic analysis