Data Security

Abstract

Data security is concerned with the methods of protection of data in computer and communications systems. In chapter 1, it was shown that security in computer based information systems can be achieved only if there are comprehensive and effective security mechanisms (1) within the computer system, (2) at the user-computer interface and (3) throughout the organisation in which the information system operates. In this chapter, the security mechanisms within the computer system, that is the internal computer controls, are considered. In addition, some of the problems associated with the user-computer interface are discussed because they impinge directly upon data security by undermining internal computer controls that are otherwise perfectly designed.