NCJ Number
99002
Journal
Computer Security Volume: 3 Issue: 1 Dated: (Summer 1984) Pages: 33-40
Date Published
1984
Length
8 pages
Annotation
The increasing use of personal computers in business raises concerns about security. Equipment must be protected, though this is less important than protecting data which is stored on PC media and processed through PCs.
Abstract
The lack of specific hardware security features and operating systems without privileged instructions calls for greater emphasis on physical access controls, careful media management (with attention to 'erased' but still-readable files), and consideration of encryption as a means of increasing data security. Other important security areas are contingency planning (especially equipment and software compatibility), auditability, and access to host mainframe systems. A new opportunity is the chance to isolate sensitive applications on dedicated, non-communication systems. In general, the 'traditional' computer security measures are still important and adequate in the PC world. Management must recognize its responsibility for protecting information, not machines, and should use a risk-management approach to implementing security measures. (Publisher abstract)