Element Of Comp Sec Continuetion

Elements Of Computer Security

Continue from Element of computer security
5. System owners have computer security responsibilities outside their own organizations.
If a system has external users, its owners have a responsibility to share appropriate knowledge about the existence and general extent of security measures so that other users can be confident that the system is adequately secure.

6. Computer security requires a comprehensive and integrated approach.
When providing computer security one needs a comprehensive approach that considers a variety of areas both within and outside of the computer security field. This includes interdependencies of security controls and also such factors as system management, legal issues, quality assurance, and internal and management controls. Computer security needs to work with traditional security disciplines including physical and personnel security.

7. Computer security should be periodically reassessed.
System technology and users, data and information in the systems, risks associated with the system and, therefore, security requirements are always changing. In addition, security is never perfect when a system is implemented. System users and operators discover new ways to intentionally or unintentionally bypass or subvert security. Changes in the system or the environment can create new vulnerabilities.

8. Computer security is constrained by societal factors.
The ability of security to support the mission of the organization(s) may be limited by various factors, such as social issues. For example, security and workplace privacy can conflict. Security measures should be implemented recognizing the rights and legitimate interests of others. Rules and expectations change with regard to the appropriate use of security controls and these changes may either increase or decrease security. The relationship between security and societal norms is not necessarily antagonistic. Security can enhance the access and flow of data and information by providing more accurate and reliable information and greater availability of systems.

Mandekira.net is designed by Mandekira

a Nigerian world class blogger

Copyright(c) 2009.