NCJ Number
11478
Date Published
1973
Length
263 pages
Annotation
MEASURES TO GUARD AGAINST BOTH NATURAL AND MAN-MADE THREATS AGAINST INSTALLATION AND DATA SECURITY.
Abstract
THE AUTHORS NOTE THAT THERE IS NO SINGLE FACTOR IN TRADE OR INDUSTRY THAT SURPASSES THE COMPUTER IN ITS POTENTIAL TO CRIPPLE OR DESTROY AN ENTIRE OPERATION QUICKLY. THE POTENTIALS FOR DAMAGE TO A COMPUTER SYSTEM ARE MANY, INCLUDING ECONOMIC, OPERATIONAL, AND LEGAL PROBLEMS. DAMAGE MAY BE THE OUTGROWTH OF A MALICIOUS ACT, A NATURAL DISASTER, OR NOTHING MORE SINISTER THAN OPERATIONAL CARELESSNESS. ANY FIRE, FLOOD, EARTHQUAKE, OR STRUCTURAL FAILURE OF THE BUILDING MAY DESTROY THE SYSTEM. PROCEDURAL ERRORS CAN ERASE VITAL INFORMATION. MECHANICAL PROBLEMS ATTRIBUTABLE TO FAULTY EQUIPMENT MAY BE ALMOST AS DESTRUCTIVE. SABOTAGE OF FILES OR COMPUTER HARDWARE BY A DISGRUNTLED OR DERANGED EMPLOYEE IS ANOTHER RISK, AS IS DELIBERATE DESTRUCTION OF AN ENTIRE COMPUTER INSTALLATION BY A MILITANT GROUP. THE POSSIBLE LOSS OF ESSENTIAL DATA WHILE CONVERTING RECORDS FROM A MANUAL OPERATION TO A COMPUTER SYSTEM IS ANOTHER DEFINITE THREAT. EMPLOYEE EMBEZZLEMENT OF ASSETS REPRESENTS A CONTINUING DANGER IN THE OPERATION OF A COMPUTER ACCOUNTING SYSTEM, JUST AS IT DOES IN A MANUAL ACCOUNTING SYSTEM. THIS WORK DETAILS THE STEPS MANAGEMENT CAN TAKE TO AVOID THESE PROBLEMS. IT WILL HELP SYSTEMS SPECIALISTS, OPERATIONS MANAGERS AND MEMBERS OF SECURITY DEPARTMENTS TO UNDERSTAND THEIR INTERLOCKING RESPONSIBILITIES AND SPOT POTENTIALLY TROUBLESOME AREAS. ALSO DISCUSSED ARE SECURITY RELATED TO REMOTE TERMINAL ACCESS OPERATIONS, PERSONNEL PRACTICES AS THEY PERTAIN TO SECURITY, EMERGENCY SHUTDOWN AND DISASTER PLANNING, AND INSURANCE PROTECTION AGAINST LOSSES. (AUTHOR ABSTRACT MODIFIED) (SNI ABSTRACT)