Threats & Vulnerabilities: Security and Your
Business
by Jim Cavanagh
Posted: 04/08/2002
Abstract:
This is a story about security threats and vulnerabilities. This is a story about your business. You will benefit a lot more from this story if you would pause from time to time and ask the questions "What does this mean to me personally?" and "How can I take action on this in my own business?"
Like any story we have specific points we must cover. We must answer the Who? What? Why, When, Where and How of organizational security. And though the specifics will vary from organization to organization there are some similarities across most businesses. By the end of the story you will have a much better idea of:
|
WHO might wish to compromise your information, do harm to you or your employees or exploit your products or assets to attack other organizations or compromise our national defenses. |
|
WHAT these attackers might do, and what they have done to other organizations. |
|
WHY the security situation is as it is today, the attackers do what they do and might select you as a target for their attacks. |
|
WHEN the attackers are most likely to strike. |
|
WHERE their attacks are most likely to focus and ... |
|
HOW they do their jobs. |
In these few pages we are not, of course, able to provide a full range of information on all of these topics, nor is that our intent. Our intent is to help you begin the thinking process, to stimulate discussion and debate and kick-start the process of organizational security awareness and planning.
http://www.webtorials.com/main/resource/papers/cavanagh/paper1.htm