Database and Application Security: A Practitioner's Guide

Chapter 16

Corporate Security in Practice

After discussing at length all the possible attacks and how to mitigate those attacks and how to apply due diligence to avoid an attack or transfer it to insurance, we know that security must be considered right from step zero for anything in a corporate setting. If not, worrying late is better than never worrying at all about security. Feigning ignorance does not work, and it is not helpful. We also know that employee training and increasing awareness among staff are mandatory to recognize an attack or attempt to breach. Everyone in the corporate setting has the responsibility of taking care of security and working in tandem to reach out and cooperate with each other.

Figure 16-1 shows an example of ...