Whereas it was once only military or government agencies, now virtually anyone or any corporation is a potential target. Banks are a logical target, for financial gain, as are organizations which use electronic business data exchange. Government departments and telecommunications organizations are targeted, and so are corporations. Especially vulnerable, as noted above, are those with open networks. Legal entities, also targets, need most particularly to protect information about individuals and organizations they may be representing, and cases in which they may be involved.
Primary considerations are the risk involved, and the seriousness of the results.
The greater the seriousness or risk then the greater should be the protection of the information. But, if carrying the crown jewels, then that is a different story. So, weigh the costs of protection against the cost of loss or damage - assess the risks involved and the importance of the information. Information security should make unauthorized access attempts not profitable for anyone attempting to hack into the security system. There are various methods which managers of information should be adopting to create a safe environment for information use.