Essential Information Security For Corporate Employees

This paper was written to raise security awareness and provide corporate employees with essential security information that emphasizes critical issues surrounding an implementation of security 'best practices' throughout an organization. Do not assume that this paper is an all inclusive guide to corporate information security. Information security consists of four major components: technology process policy and culture. This paper focuses on culture and specific human factors that weaken security in an organization. Please be advised that this is a 'what to do' paper not a 'how to do' paper. This paper is written in a style that attempts to address the non-technical person. We lightly touch on the 'why to do' but comments are limited to providing only basic understandings. Our goal is to facilitate changing current culture through security awareness so that each day every one of us demonstrates a proactive role in protecting intellectual assets from falling into the wrong hands.