computerwoche.de

Archiv

The dynamic nature of IS

03.07.2006
Security 'buzzwords' are considered foul language in the vocabulary of many a security service provider - and for good reason. It is the derivative lingo that has helped to define a typical 'follow the herd' approach to information security (IS) within modern business. Thankfully, this perception is changing, and managers are now supporting an investment in technology with careful consideration of the role of people and processes.

This can only strengthen the resolve of businesses to acquire improved protection against existing and emerging malware or malicious software. One of the fundamental weaknesses in the 'follow the latest trend' approach is that it is based on the notion that technology alone will solve all issues. It is the mistake that technology will cloak systems and infrastructure in an impenetrable suit of digital armor that has been the Achilles heel of many a company.

The undisputable fact is that technology alone cannot and will never provide this level of protection. An incorrectly deployed and managed IS technology solution, one against which there are no applied controls or enforced business requirements, is as bad as, if not worse, than not having any protection at all.