Computer Security is the ongoing process of protecting your data, your information, your equipment, your customers, you reputation and your ability to run a business. Its about making sure only those that are authorised to use your data and systems are in fact allowed to do so. Its also about making sure those that are not authorised are positively excluded from doing so. Having good security will make sure your business objectives are not impeded by those who would disrupt your activities and rob you of your data and information or corrupt it so you cannot continue with your business.

Whilst computer security is complex and requires a "security mind set" to be successful there are some straight forward steps that can be taken to at least bring the minimum protections needed. Having said that those who would interfere with your systems are constantly trying new devices to attack systems that are unprotected which is why the opening remarks talk about it being an ongoing process.

For the fullest protection information security embraces more than just the computer systems and is, indeed, a wholly integrated part of all the procedures and processes within a business or orgnaisation. This is the approach taken by BS 7799 / ISO 17779 which is the gold standard.

This set of articles sets out some of the steps that will help you make sure you have at least taken on board the minimum set of protections applicable to the computer systems element.