• Log In
  • Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

Protection of Information Assets

Temple University

Protection of Information Assets

MIS 5206.001 ■ Fall 2024 ■ David Lanter
  • HomePage
  • Instructor
  • Syllabus
  • Schedule
    • First Half of the Semester
      • Unit #1: Understanding an Organization’s Risk Environment
      • Unit #2: Case Study 1 – Snowfall and stolen laptop
      • Unit #2: Data Classification Process and Models
      • Unit #3: Risk Evaluation
      • Unit #4 Case #2: Autopsy of a Data Breach: The Target Case
      • Unit #5: Creating a Security Aware Organization
      • Unit #6: Physical and Environmental Security
    • Second Half of the Semester
      • Unit #8 Case Study 3 – A Hospital Catches the “Millennium Bug”
      • Unit #9: Business Continuity and Disaster Recovery Planning
      • Unit #10: Network Security
      • Unit #11: Cryptography, Public Key Encryption and Digital Signatures
      • Unit #12: Identity Management and Access Control
      • Unit #13: Computer Application Security
  • Deliverables
    • Weekly Deliverables
      • “In the News” Articles
      • Answers to Reading Discussion Questions
      • Comments on Reading Discussion Question and Other Students’ Answers
    • Case Studies
    • Team Project

Question 2

August 4, 2024 by David Lanter 15 Comments

Is information security a technical problem or a business problem?  Explain your answer.

Filed Under: Unit 01: Understanding an Organization's Risk Environment Tagged With:

Reader Interactions

Comments

  1. Sarah Maher says

    August 22, 2024 at 3:06 pm

    Information security is a problem that an entire organization must frame and solve. Information security cannot be solely the responsibility of IT, because IT is not the only risk. Employees must have memorable training on how to be conscious of how their actions can cause security breaches. Upper management must place security as a priority and allocate proper funding, training, and procedures to prepare for the inevitable problems that will occur. Whether this means hiring an outside firm to conduct an initial audit or utilizing a non-profit, the company must first be audited in order to know what procedures are necessary.

    Log in to Reply
  2. Justin Chen says

    August 23, 2024 at 5:13 pm

    Information security is both a business and a technical problem. Information risks not only occurs when the technologies or the systems of the organization breakdown, which the technical staffs will address, but it also happens when employees don’t have enough information security background and may potentially cost the company its information assets. This is a responsibility for the whole company. Organizations should launch a reasonable training to teach employees and even the supervisors how to protect information assets and recognize the behaviors that may potentially compromise the safety of proprietary information of the company. It is also important for employees to know the proper procedure when facing security breaches.

    Log in to Reply
  3. Lily Li says

    August 24, 2024 at 5:48 pm

    Information security poses different challenges ranging from fractured systems, attitudes towards security, and high expectations making it imperative to have these challenges handled together as a business. To ensure that information stays protected a classical risk assessment needs to be performed, including a contingency plan. If a data breach occurs, the entire business should be able to react promptly to make sure that the company’s most critical functions continue to run while the situation is stabilized. By demonstrating active concern across the entire business, fewer instances of information loss due to negligent behavior will occur. Information is being transferred daily within the company as well as to third parties; so making sure that everyone in the company has a grounded understanding of data security will reduce the chances of a data breach.

    Log in to Reply
  4. Daniel Akoto-Bamfo says

    August 25, 2024 at 3:35 pm

    The problem of information security should be viewed as an organizational problem. Management should not only concentrate on the performance and the profitability of the business but must also concentrate on the information security of the business. This is vital because the information security of the business is the business and as such investment must be made in building a robust information security infrastructure just as for the performance and profitability of the business. On the other hand, users of the information security infrastructure must be trained to be conscious of the valuable information asset they are entrusted with and possess a sense of security awareness when using the system.

    Log in to Reply
  5. Clement Tetteh-Kpakpah says

    August 25, 2024 at 3:36 pm

    Information Security is both a technical and business problem. Management and technology are equally required in the planning and implementation of information security systems. Management ought to provide appropriate support, policies and funding for information security training for staff and key stakeholders while IT teams should be skilled, trained, and able to put in information security preventive measures and as well handle situations when they come up.

    Log in to Reply
  6. Rohith says

    August 25, 2024 at 6:32 pm

    Technical aspects of information security, such as implementing firewalls, encryption, and intrusion detection systems, are crucial, they alone do not guarantee security, the business aspect also play a important role in key decision making.
    To keep critical information protected there has to be proper technology Implementation and vulnerability assessment from the technical side also from the business side things such as Risk management, policies and compliance must be updated on regular basis.
    Both Technical and business decisions must be aligned with effective Risk mitigating strategies so usage of newer Technology and usage of better business strategies will reduce the risk of data breach and data loss thus not losing Company reputation.

    Log in to Reply
  7. Charles Lemon says

    August 25, 2024 at 9:34 pm

    Information security can be both a business and technical problem. On a business level, concerns over funding and the percentage of budget allocation an organization contributes comes to mind. On the technical side, ensuring the most up to date technologies are implemented by security professionals who know what they are doing with that technology is fundamental to information security.
    An organization has the necessity for both of these problems to be addressed. A business minded professional may raise the awareness on the importance of information security to an organization’s executives. While technical security personnel put the policies into action for an effective information security program to perform.

    Log in to Reply
  8. Aaroush Bhanot says

    August 26, 2024 at 11:13 pm

    Information security is both a technical and business problem, therefore understanding it is crucial for effective operations of an organization. An organization may be vulnerable to numerous cyber threats, such as malware, phishing campaigns, and network intrusions. To defend the organization’s assets and information, technical solutions in the form of firewalls, encryption, honey pots, and intrusion detection systems need to be installed. The technical aspect in expanded with the need for a proper infrastructure to secure systems, regularly update software patches, and monitor endpoints for suspicious activities. From a business perspective, information security is about managing risks that could impact the organization’s operations, reputation, and financial standing. A security breach can lead to loss of customer trust, regulatory penalties, and significant financial losses. Businesses must comply with various regulations (like GDPR, HIPAA) that mandate certain security measures. Failure to comply can result in legal consequences and fines.

    Log in to Reply
  9. Parth Tyagi says

    August 27, 2024 at 11:26 am

    At first, information security appears to be a technical problem, but technology in itself is only a business ENABLER. Any technical problem which occurs will definitely have an impact on the business as well, which makes information security both a technical and business problem. After all, information security exists to protect the business.
    Technically, it involves deployment and maintenance of controls such as firewalls, encryption mechanisms, intrusion detection/prevention systems, incident response and vulnerability management process. From a business angle, information security involves managing risk and ensuring alignment of security practices with the business goals/objectives of the organization, for example, regulatory and statutory compliance, or financial and legal safety.

    Log in to Reply
  10. Haozhe Zhang says

    August 27, 2024 at 10:03 pm

    Information security should be viewed both as a technical problem and a business problem. The topic at its core is a technical problem, the effectiveness of information security completely depends on the effectiveness of the technical measures implemented. However, many aspects of the business relies on having a stable information security situation. Any company with constant security issues cannot implement any of there business strategies. The business should also support the technical aspects of information security by providing measures like proper trainings on security to ensure that the technical implementations can be as effective as possible.

    Log in to Reply
  11. Steven Lin says

    August 28, 2024 at 1:08 am

    Information security is a multifaceted issue that encompasses both technical and business considerations. On the technical side, it involves the use of tools and systems, such as firewalls, encryption, and intrusion detection, to safeguard data from cyber threats. From a business standpoint, protecting data is crucial for minimizing financial loss, legal complications, and damage to the company’s reputation. Therefore, businesses must ensure they incorporate robust security practices into their overall business strategy. Achieving a balance between technical and business solutions is essential for effectively managing information security.

    Log in to Reply
  12. Elias Johnston says

    August 28, 2024 at 2:26 am

    Information security isn’t just a technical problem or a business problem, it’s an organizational problem.

    From a technical standpoint, technical skills are required to monitor and manage the businesses systems to mitigate risks and breaches. These are the hard security measures that are responsible for defending against threats to the network, regardless of human error.

    From a business standpoint, it is the businesses responsibility to mitigate risks by ensuring the people in the technical space are necessarily equipped to defend against threats. It is also the businesses responsibility to ensure that every employee is made aware of threats to their security, such as phishing scams and other forms of social engineering. These are the soft security measures. Regardless of the training of employees, it is hard to guarantee that all employees of a moderately sized company are secure, however they all should be educated.

    Information security is a problem that involves every member of the organization, as a threat to information security effects everyone in the organization.

    Log in to Reply
  13. Lili Zhang says

    August 30, 2024 at 10:24 am

    I believe information security is primarily a technical problem. Ensuring information security fundamentally relies on technology, as the core objective is to reduce vulnerabilities and prevent threats through technical measures. This requires careful consideration of various technologies during the design of information systems, such as firewalls, intrusion detection systems. Additionally, when security issues do arise, immediate action is needed to address and resolve the technical problems.
    Information security is also deeply connected to business considerations. It is a critical factor that customers consider, and it directly impacts business performance and overall profitability.

    Log in to Reply
  14. Sara Sawant says

    August 31, 2024 at 6:38 pm

    Information security is both a technical problem as well as a business problem. As information security involves protecting valuable IT assets like systems, controls and data from any risk or cyberattacks which play an important role for effectiveness of business. IT is one of the main pillar of organization and for the business to continue therefore it is important to align technical measures with business objectives.

    Log in to Reply
  15. Yash Mane says

    September 2, 2024 at 4:24 pm

    Information security combines both technical and business aspects as it entails
    safeguarding systems and data from cyber attacks (technical) while also addressing
    risk management, compliance, and retaining consumer confidence (business). An
    integrated strategy is needed for optimal security.

    Log in to Reply

Leave a Reply Cancel reply

You must be logged in to post a comment.

Primary Sidebar

Weekly Discussions

  • Unit 01: Understanding an Organization's Risk Environment (5)
  • Unit 02: Case Study 1 – Snowfall and a stolen laptop (2)
  • Unit 02: Data Classification Process and Models (6)
  • Unit 03: Risk Evaluation (6)
  • Unit 04: Case Study 2 – Autopsy of a Data Breach – The Target Case (4)
  • Unit 05: Creating a Security Aware Organization (6)
  • Unit 06: Physical and Environmental Security (6)
  • Unit 08: Case Study 3 – A Hospital Catches the "Millennium Bug" (3)
  • Unit 09: Business Continuity and Disaster Recovery (6)
  • Unit 10: Network Security (6)
  • Unit 11: Cryptography, Public Key Encryption and Digital Signature (6)
  • Unit 12: Identity Management and Access Control (6)
  • Unit 13: Computer Application Security (6)
  • Welcome (1)

Copyright © 2025 · Course News Pro on Genesis Framework · WordPress · Log in