NCJ Number
57750
Date Published
1977
Length
8 pages
Annotation
POOR COMMUNICATIONS AMONG SECURITY OFFICERS, COMPUTER USERS, AND VENDORS ARE DISCUSSED, AND SECURITY OFFICER TRAINING METHODS ARE NOTED IN LIGHT OF PROBLEMS INVOLVED IN PROVIDING COMPUTER SECURITY.
Abstract
SECURITY PROBLEMS MUST BE SOLVED BEFORE THE COMPUTER'S FULL CAPABILITIES CAN BE REALIZED. THE CONTINUED PRESENCE OF SUCH PROBLEMS AFFECTS THE SECURITY OF CORPORATE INFORMATION, PERSONAL DATA, AND NATIONAL SECURITY. SECURITY OFFICERS ARE BEING FORCED TO DEVELOP RESPONSES TO THESE PROBLEMS. HOWEVER, THE DEVELOPMENT OF SUCH RESPONSES REQUIRES A COORDINATED, INTERDISCIPLINARY TEAM APPROACH INVOLVING SECURITY OFFICERS, COMPUTER SPECIALISTS, AND VENDORS. SECURITY OFFICERS CAN SERVE AS COORDINATORS OF SUCH EFFORTS, PROVIDED THAT THEY ARE KNOWLEDGEABLE ABOUT THE OPERATIONS AND SECURITY PROBLEMS OF THE VARIOUS PARTS OF THE ORGANIZATION. ALTHOUGH MANY OF THE NEW COMPUTER SECURITY SPECIALISTS ARE FORMER DATA PROCESSORS, SUCH AN ORIENTATION PRESENTS PROBLEMS ESPECIALLY IF THEY FAIL TO CONSIDER THE RELATIONSHIP OF COMPUTER SECURITY TO OVERALL ORGANIZATIONAL SECURITY. SECURITY OFFICERS MAY ENCOUNTER DIFFICULTIES IN IMPLEMENTING THEIR SECURITY PROPOSALS IF COMPUTER OPERATORS CONSIDER THE MEASURES TOO INCONVENIENT. FOR EXAMPLE, PROPOSED CHANGES IN PHYSICAL AND PERSONNEL SECURITY MEASURES, WHEN COMBINED WITH CHANGES IN COMPUTER OPERATIONS, CAN SERIOUSLY UPSET ESTABLISHED PROCEDURES. ADDITIONAL RESEARCH INTO SECURITY PROBLEMS POSED BY EXISTING COMPUTER OPERATIONS IS NEEDED. MANY COMPELLING RESEARCH PROBLEMS ARE EVIDENT, SUCH AS THE NEED TO STUDY THE EFFECTS OF SECURITY SYSTEMS ON COMPUTER OPERATORS AND TO DEVELOP NEW APPROACHES TO SECURITY EDUCATION AND THE TRAINING REQUIREMENTS OF COMPUTER SECURITY OFFICERS. NO REFERENCES ARE PROVIDED. (KCP)