Information Security
Information security ensures that only authorized users (confidentiality) have
access to accurate and complete information (integrity) when required
(availability).
Security Officer
The corporate security officer is responsible for coordinating the planning,
development, implementation, maintenance and monitoring of the information
security program, including the awareness effort. As part of that effort, the
corporate security officer also provides for the education and awareness of people
on security matters, coordinates risk assessments and audits, and develops and
maintains policies, standards and procedures.
Security Awareness
Security awareness is the extent to which every member of an organization and
every other individual who potentially has access to the organization’s information
understand:
• Security and the levels of security appropriate to the organization
• The importance of security and consequences of a lack of security
• Their individual responsibilities regarding security, and act accordingly
The answer is education and user training. Passwords should not be regarded as obstacles but as keys for very important locks. Users must be made aware of such concepts, not simply dropped into new environments. If the employee had been given a clue, they never would have done it, but the only training this company ever gave her was how to use Word.
ET policies http://www.neola.com/brevardco-fl/search/AP/ap7540.04.htm
Brevard Public Schools Information Security Motto:
Users need to know that no matter what physical and Technological devices are in place…
Ultimately, It is user Knowledge and Action that will achieve the utmost security for the District.