Company private information varies from company to company, but typically consists of information that should only be disclosed to employees and partners of a company, such as policy and procedure manuals. Of course, it's possible to get a bit carried away with what information is considered to be private. Public information is information such as product literature, brochures, and catalogs that needs to be freely available to anyone, but whose integrity needs to be assured to prevent unauthorized alteration. This information is often provided to customers and interested parties by means of Web servers and the Internet. Evaluating Risk Evaluating risk is a critical step in choosing a security solution.
Perceptions often differ substantially from actual risks.
The perception of risk is much higher than the actual risk. When someone calls up by phone, we are not afraid that they are impersonating a customer. Often the primary risk is found to be internal. For example, system administrators often have access to sensitive information otherwise limited to executives. A remote dial-in line set up for debugging could be used to gain general access to internal systems, bypassing other security safeguards.