Security for Small Computer Systems

Chapter 1. The Need for Security

1.1 Introduction

1.2 The Threat

1.3 What is "Security"

Chapter 2. Physical Security

2.1 Introduction

2.2 Theft

2.3 Accidental Damage

2.4 Deliberate Damage

2.5 Unauthorized Disclosure

2.6 Environmental Hazards

Chapter 3. Protection of Data and Software

3.1 Introduction

3.2 Threats to Data and Software

3.3 Access Controls

3.4 Accuracy of Software and Data

3.5 Purchasing Software

3.6 Micro-computers and Word Processors

3.7 Networked Systems

Chapter 4. Protection against Fraud

4.1 Introduction

4.2 Personnel Procedures

4.3 Operational Controls

4.4 Impact of Different Types of Systems

Chapter 5. Survival Planning

5.1 Introduction

5.2 Approaches to Survival Plan Development

5.3 The Survival Plan

5.4 Alternative System Selection

Chapter 6. Assessing the Risk

6.1 Introduction

6.2 Risk Assessment

Chapter 7. Security Management

7.1 Introduction

7.2 The place of Computer Security in the Business

7.3 Risk Management

7.4 Security Policy

7.5 Implementing the Policy

7.6 Integration of Security and System Development

7.7 Acquiring a System

7.8 Controlling Change

Annex A Acknowledgments

Annex B Glossary of Terms

Annex C Passwords

Annex D Access Control Methods

Annex E Encryption/Authentication

Annex F Survival Plan Contents List

Annex G Index