ABSTRACT

An organization must have provisions for network security

to protect its assets. Appropriate network security identi-

fies and protects against threats to people, processes, tech-

nologies, and facilities. It can minimize or mitigate

exposures to the organization that could be exploited by a

knowledgeable insider or a malicious outsider. It suggests

appropriate safeguards designed to promote long-term,

continuous function of the environment. For some organi-

zations, the law mandates it.