Determinants of business information security

Insufficient security can result in downtime, or even worse, reduce credibility with customers and partners. Many organisations have preventive security measures in place, such as firewalls, antivirus systems and networking monitoring software. But while prevention can go a long way in safeguarding information assets, having a plan in place for meeting potential threats is critical. Realizing comprehensive security relies upon organizations ability to strategically assess areas of potential weakness, which is where having an assessment of business overall security program comes in and thereafter setting the business objectives for information security, often called security program design and management. The focus of this paper is on the major objectives to be considered for safeguarding the business information.