Abstract Security is a critical issue that tends to be overlooked by so many businesses yet it is of much significance to the operation of any given business. This includes security of both information system and also business property. Poor information security may lead to poor performance since competitors are most likely to have access to the business documents, data and workflows. It is therefore the obligation of any particular business to ascertain appropriate security of information from the intruders and promote accountability as far as business property is concerned. This bid is a simple proposal of a workable security system within an organization to ensure business information is properly guarded against any intruding persons and guarantee maximum protection of business property. Introduction Information is a very vital issue to a business and hence should be given first priority at any given time. To come up with an effective security system for both information and property within a business; assets, threats and available resources must be put into consideration. This security system has been designed for a small business and it safeguards information and property from intruders. Methodology Information security system Business information may include but not limited to information on employees, consumers, commodities offered, financial status of the business, business policies and also future plans of the business hence such information should be inaccessible to everyone ranging from the business employees to the outsiders including competitors. To protect business gadgets from damage by viruses, spyware and other malevolent codes, a regularly updated anti-virus and anti-spyware should be set up in all the computers belonging to the business and also personal computers for employees since some use their computers while at home. The application can be bought from software vendors. After installing, the software should be set to automatically check for updates and scan the entire system at certain specified times to ensure better protection from any threat. Internet connection exposes the system to threat throughout hence to counter this, the business has to subscribe to the wireless firewall access from hardware vendors. After installation, the administrative password and name have to be changed immediately followed by frequent changing to ensure hackers are kept at bay at all times. All computers including those for employees must be installed with active firewall software to ensure all sources of risks are sealed. The organization should patch and update its executive program, applications, business automation products and other products to ensure efficiency in data security. Automatic updates must be turned on for all the windows in all the computers. Support copies of relevant organization data need to be made on a separate disk regularly for easy retrieval of data in case of computer breakdown, hard disk fail, floods, fire and even theft. These files may include word documents, electronic spreadsheets, databases, financial files, human resources files, accounting files and any other relevant information. This has to be made automatic and the separate disks kept elsewhere from the business premises followed by regular checks to ascertai