The minute you allow users to access a system, you create the potential for security problems. The goal is to achieve balance. Second, in the e-business era, the companies that fail to pay enough attention to, or spend enough money on, security will be at significant risk. In the era of internally focused IT, security was relatively easy to implement and easy to take for granted. Today, it's neither.
Good security starts with coherent policy and ends with an audit.
In between is a lot of hard work, as well as some expensive products and people. But if you're serious about e-business, you'd better get serious about security. Still, security technology is complex, so many customers have a hard time deciding what steps to take next. Clearly a proactive security relationship with your Internet service provider, and contingency plans for what you'll both do if you're attacked, are necessities. Enterprises must also be looking at the infrastructure issues that affect overall security, with user and resource management being a focal point.