” Information security is how we can prevent fraud (cheating) or, at least, detect any fraud in information based systems, where information itself has no physical meaning (G. J. Simons).”

Security problem is one main aspect in an information system. Unfortunately these security problems are often received poor attention from the owners and manager of information systems.
The security issues often become second or even last sequence in the list things that are considered as important. Even in case there are problems in system performance, security is often reduced or eliminated.

In nowadays, information has become a commodity that is very important. Some IT practitioners (or experts) even say that we already are in an information-based society. The ability to access and provide information quickly and accurately becomes very essential for an organization, whether in the form of commercial organization (companies), universities, government agencies, and individual (personal). This is mainly supported by rapid developments in computer technology and telecommunications. Formerly, the number of computers are limited and not yet intended to store sensitive information. The computers usage to store classified information is started around the 1950s.

Some information has very important value since it may only be accessed by certain people. The collapse of that information into the hands of another party (e.g. the opposite side of business) can cause harm to the information owner (or the organization). For example, a lot of information in a company only allowed to be accessed by certain people within the company, for example information about the products that are in development; or algorithms and techniques used to produce product. For that reason, security of information systems must be guaranteed within acceptable limits.

Computer networks, such as LAN and the Internet allow for providing information quickly. This becomes one reason why company or organization began to make LAN in their information system and connecting their LAN to the Internet. When LAN or computer connected to the Internet, potential existence security holes (security holes) which formerly could be covered with physical security mechanisms opened. This is consistent with the argument that ease (comfort) in accessing information is inversely proportional with the level of information system security. The higher security level, means the more difficult (not comfortable) to access information (and vice versa).

Translated from Keamanan Sistem Informasi Berbasis Internet by Budi Rahardjo

Picture taken from here

Related posts:

1. Information Security and Company Management
2. Physical Access Controls in Information Security
3. Category of Information Security
4. Core Principles of Information Security
5. Security Awareness with Clear Punishment