Wireless and Mobile Device Security, 2nd Edition

What to Protect?

In essence, information security refers to the processes and practices that must be implemented to secure the digital assets you wish to protect from various threats. The first step to formulating any security plan is to ask questions, such as the following:

• What are you trying to protect? Is it corporate data, intellectual property, customer data, financial assets, or remote control of a physical device?
• Why are you trying to protect it? Is protection mandated by a government or industry agency, or is it an internal best practice?
• What is the value of the asset? Have the assets been quantified? Has the cost of a data breach been estimated?
• What are you protecting it from? Are the threats internal or external? Are they aimed ...