Fundamentals of Information Systems Security, 4th Edition

Monitoring and Testing Security Systems

Securing a closed environment is difficult. Therefore, the main goal of a security professional is to protect an organization’s sensitive data from attackers. As hard as it is to secure a closed system, the job becomes far more difficult when the network connects to the Internet. Connecting to the Internet rolls out a red carpet for attackers. The job of the security professional is to deploy strategies to control access to the systems. Keep in mind that completely securing a system is impossible. Although there are many risks associated with information security, two of the most common risks follow:

• Attackers who come in from outside, with unauthorized access, malicious code, Trojans, and malware

• Sensitive ...