The purpose of information protection is to protect an organization's information, hardware, and software. Through the selection and application of appropriate safeguards, security helps the organization meet its business objectives or mission by protecting its physical and financial resources, reputation, legal position, employees, and other tangible and intangible assets. This chapter from Information Security Fundamentals examines the elements of computer security, employee roles and responsibilities, and common threats. It also examines the need for management controls, policies and procedures, and risk analysis. Finally, it presents a comprehensive list of tasks, responsibilities, and objectives that make up a typical information protection program.
Click here to read.