Principles for Managing Information Security

Abstract

Information security has traditionally been the responsibility of information technology (IT) departments, where information security has commonly been perceived to have a technological solution. During the 1980s, computer usage was mainly concentrated in computer centres, where the implementation of computer security focused largely on securing the physical computer infrastructure of the organisation (Mutsaers et al., 1998), which proved highly effective.