Information Securiity

Introduction

Information security is the process of protecting information. According to U.S. Code Title 44 > Chapter 32 > Subchapter III > § 3542 information security is protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, perusal, inspection, recording or destruction (Code, 2009).

Considering that numerous organizations today are completely dependent on information technology for survival, information security is one of the most important concerns facing the modern organization. The ever-increasing variety of threats and aggressiveness of attacks has made protecting information a complex challenge. Improved knowledge of the critical issues underlying information security can help practitioners, researchers, and government employees alike to understand and solve the biggest problems (Knapp, Marshall, R. Kelly Rainer, & Morrow, 2006).

Efficient information security systems must include an assortment of policies, security products, technologies and procedures. Unfortunately software applications that provide firewall protection and virus scanning are not enough to protect information. Hackers can use their technological skills to break into computer systems and access private information. Firewalls can be bypassed which can result in the loss of vital information, or a virus can be installed to erase information. Sophisticated hackers aren't the only ones gaining access to sensitive data on the Internet. A large amount of personal information is being left exposed or poorly protected by companies and governments (Worthen, 2010). There's a trend toward anywhere, anytime access to information which will continue changing the business environment, blurring the lines between home and office, co-worker and competitor, and removing traditional enterprise boundaries. Procedures and systems need to be applied in order to successfully prevent access to information.

Information Security Issues

Sensitive information is routinely stolen from government agencies and the private sector; these organizations face many issues trying to keep information secure. An example is a lack of education or training for employees. In order to keep an organizations' information secure employees play a pivotal role in the process. Everyone has a role to play in the success of a security awareness and training program but agency heads, Chief Information Officers (CIOs), program officials, and IT security program managers have key responsibilities to ensure that an effective program is established agency wide (Wilson & Hash, 2003). Employees need to understand their responsibilities within their organization and be familiar with various IT policies and procedures.

As today's mobile workforce continues to grow, not only is the phrase "out of