Information security and data protection

The use of the Internet and networked computers has changed the computing environment significantly. While providing convenience, the systems are also more vulnerable to security threats. This article discusses actions that may be taken to enhance security. A comprehensive analysis should be conducted to identify resources that need to be protected. The resources should be classified according to the sensitivity level of information. A cost-benefit analysis should be performed to determine the level of security precautions that should be given to contingency planning and recovery. If security is compromised, the organisation should be able to recover quickly and minimise damages.