Computer security is a process of planning, implementing, and verifying the protection of your organization's computer-related assets from internal and external threats. Any organization that operates a computer system should engage that process by designating at least one person as the organization's security specialist. A security specialist, whose duties are described in this chapter, coordinates the organization's efforts toward establishing computing security. While that person may not be a security expert, he or she keeps informed about possible threats, and keeps a critical eye on the organization's ability to respond to each type of risk.
Security is a delicate balance that requires an artist's touch, rather than an expert's touch.
This chapter discusses the considerations that go into achieving that balance. To have computer resources available and working as intended when needed by authorized users. A wide variety of human actions, ranging from innocent to curious to malicious in intent, can compromise these two fundamental goals. Computer security often fills peoples' heads with dark, romantic images of government computer break-ins, inspired by James Bond movies. In reality, a missing icon on a classroom computer can indicate a security problem.