People and Security

Abstract

People are important with respect to security of computer based information systems for three reasons. First, information systems must be protected from people because people can cause threats to an organisation as a result of their accidental or deliberate acts. The second reason relates to the fact that people form components of information systems and therefore may come under threat from others; in this situation protection of people is necessary. Finally, people in their routine work act as security countermeasures.