Security Finance & Payback

Security Finance

A strong effective information security program consists of many layers that create a "defense in depth" (Spontak, 2006). The objectives of information security is to make any unauthorized, unwanted access extremely difficult, easily detected, and well documented. Components of strong defense include firewalls, virus filters, intrusion detection, monitoring, and usage policies. Some businesses are missing the business culture, policies and procedures, separation of duties, and security awareness.

The Finance Department is critical to the security of the information system. Financial executives can set the tone, encourage compliance with security policies, and lead by example. Allowing the sharing of passwords puts the information security at risk, especially where financial, employee, and customer information is concerned. When employees are uneducated regarding compliance regulation, the organization can end up in trouble with authorities. Employees should be evaluated on information security measures, not just on customer service measures....
[ View Full Essay]