Common sense and computer security.

Abstract

The age of information so frequently described and anticipated in "gee-whiz" language has a darker side. As recent newspaper stories and other media attention show, unauthorized tampering with computer data banks and computer programs is on the rise. And the problem will grow worse with the proliferation of microcomputers, word processors, and data networks and with the swelling ranks of people familiar with their use. Probing beyond the conventional legislative and technological solutions to computer security problems, the authors look at what managers can do to preserve the integrity of their companies' information systems. While it is no longer possible simply to delegate responsibility for computer security to data processing managers, senior managers should not rely on expensive and complex solutions, according to these authors. They argue for simple, commonsense measures and advise how auditing and control systems can be revitalized to help detect security problems before they become serious.