Bifalgorithm post · IntroductionToBusiness OP 8D04gAa · 2026-10-07-36573 · 13.5. Protecting Computers and Information*

How can companies prevent computer and information security problems?

How can companies prevent computer and information security problems? (IntroductionToBusiness OP 8D04gAa · 2026-10-07-36573 · 13.5. Protecting Computers and In…

Ideas in this flowchart

  • Formal written information security policies are the first step in a company’s security strategy.
  • They set security standards and provide the basis for enforcement.
  • More than two-thirds of surveyed IT executives expect a cyberattack in the near future.
  • A documented and tested process brings order to chaotic situations and focuses attention on urgent issues.
  • Without security strategies, companies react to crises instead of focusing on prevention.
  • Security plans should receive support from top management.
  • Procedures should implement the established security policies.
  • Policies should be reviewed often because IT equipment and processes continually change.
  • Some policies can be handled automatically through technical measures.
  • Administrative policies rely on humans to perform them.
  • Users must change their passwords every 90 days.
  • End users must update their virus signatures at least once a week.
Feed/

How can companies prevent computer and information security problems?

No cover

Channel

IntroductionToBusiness OP 8D04gAa · 2026-10-07-36573

1 page

"Creating formal written information security policies to set standards and provide the basis for enforcement is the first step in a company’s security strategy. Unfortunately, a recent survey of IT executives worldwide revealed that over two-thirds expect a cyberattack in the near future. Stephanie Ewing, a data security expert, states, “Having a documented, tested process brings order to chaotic situations and keeps everyone focused on solving the most pressing issues.” Without information security strategies in place, companies spend too much time in a reactive mode—responding to crises—and don’t focus enough on prevention. Security plans should have the support of top management, and then follow with procedures to implement the security policies. Because IT is a dynamic field with ongoing changes to equipment and processes, it’s important to review security policies often. Some security policies can be handled automatically, by technical measures, whereas others involve administrative policies that rely on humans to perform them. Examples of administrative policies are “Users must change their passwords every 90 days” and “End users will update their virus signatures at least once a week.”"

Flowchart preview
👍
0
0 comments0 shares

Sign in to view and post comments.