Question

How should organizations respond to security threats? Support your answer with the textbook or at least one scholarly resource.

Answer 1

Organizations should respond to security threats by:

1. Technically safeguarding hardware and software by different means like:

• Proper authorization process in place
• Firewalls installation
• Blocking malware and spyware
• Encrypting software to restrict access

2. Data protection:

• Data storage and backup
• Data recovery plan
• Data encryption
• Password protected files

3. Security procedures:

• Designing security procedures and plan to respond to different kind of security threats
• Training people to follow security procedures and compliance
• Assessing organization's readiness to deal with a threat
• Assessing people's awareness to respond to a threat
• Organizing mockup sessions to prepare people and organization
• documenting lessons learned from a threat

This has been taken from Using MIS: Chapter 10 on Information Systems security