The question of InfoSec, is it worth a penny?

Securing information, be it on a database, paper or any other media of commuication has become a centre of dicussion for many information managers today.

Organisations find it less attractive having to invest lots of money securing a system that has not been tested. Those who have suffered the losses however have always regretted why the idea was never as important as the loss suffered. Many have argued that losses are an eye opener to managers, others think it otherwise and suggest that no matter how dangerous or comfortable an environment is, infosec is a worthwhile longterm investment. This is a vague argument though for goal oriented and highly profit minded managers.

Others deem it even necessary to insure IT systems as a security precaution, but is that the way to go?. Should someone having a $500 computer containing a database with all staff profiles, salaries, clientelle info and organisational files invest the same $500 on security, half the price, or twice the amount?


Comments

Popular Posts