Now, e-business has created a new security landscape that seems to be full of holes. Almost daily there is a news item about a breach in security on the Internet, often involving respected well-known companies. This level of insecurity is surprising and even perplexing, given that these companies have years of IT experience. CSC Research Services suggests that security needs to be a core business competency. If e-commerce is part of your business strategy, then information security must be your vital concern.
Information security is no longer about building a fortress.
It is about maintaining the integrity of IT systems while enabling the openness required by the new digital business models. Companies need to assess their e-business risks and manage them against the potential rewards. As in any risk management exercise, the first critical task is to identify which assets are at risk. Then, ask what are the threats and impact if the assets were stolen, became inaccessible, or even destroyed. Finally, calculate the level of investment needed to ensure the security of these assets.