Secure Online Business Handbook

"There is no doubt that much valuable information is contained here for the hard-pressed business man in need of urgent but simple guidance on key scrutiny issues." - "Law Brief Focus, Autumn 2003". The Web is an exciting but unstable place to do business. The potential rewards are high but so are the risks, and the effective management of these risks 'online' is likely to be the greatest business enabler/destroyer of the next decade. Risk to the integrity, availability and confidentiality of e-business activities comes in many forms - fraud, espionage, viruses, spamming, denial of service - and the potential for damage or irretrievable loss is very real. Information security is no longer an issue confined to the IT department - it is critical to all operational functions and departments within an organization. Nor are the solutions purely technical, with two-thirds of security breaches caused by human error, management controls and processes.This second edition of a unique book is designed as a practical guide for managers in developing and implementing appropriate strategies for online risk management. Published in association with the Institute of Directors, the contributions draw on a wide range of expertise and know-how, both in IT and in other disciplines such as the law, insurance, accounting and consulting. Security should not be an afterthought in developing a strategy. It is an integral part of setting up sustainable new channels of communication and business - ignore it at your peril! The contents include: information at risk points of exposure, software protection, operational management, and contingency planning. "Contributions draw on a range of expertise and know-how from sectors such as IT, law, insurance, accounting and consulting." -Quality World "Explaining how technical and operational security are on the rise, this text outlines the best ways to avoid hackers, viruses, frauds, and denial of service." -Business Horizons, Kelly School of Business, Indiana UniversityInformation at risk; Points of exposure; Software protection; Security policies; Organisational back-up; Contingency planning.