IT Security Management

Security management is one of the major concerns in managing information systems. The organisation is beset with security risk which have to be addressed. Threats must be defined, the chances of them happening assessed. Actions must be taken to reduce the risk, for example by using firewalls and to manage the disaster if a security breach occurs.

Question: How widespread are security problems? Give some example of recent security problems which have affected companies such as Sony. Provide a classification of the main threats. What technical responses are possible? What are the limits of technical responses? How important is the management side? Explain the importance of a security minded culture. One of the greatest IT security risk is the inside threat. How can we deal with that?