Fundamentals of Information Systems Security, 4th Edition

Threats to Business Organizations

Security threats from malware originate from a variety of sources, ranging from isolated incidents involving a single, unsophisticated perpetrator to complex, structured attacks against multiple targets by organized groups. These threats generally originate outside an organization’s IT infrastructure and user community. For this reason, organizations make a significant effort to detect, respond, mitigate, and recover from these attacks.

Less publicized yet equally troublesome are threats that originate from within an organization, which are due to improper or deficient security policies and unsafe user practices. It is the IT security practitioner’s responsibility to understand the nature and significance of ...