The effective management of risks online is likely to be the greatest business enabler / destroyer of the next decade. Clearly, organizations that do not move to full e-commerce functionality are unlikely to flourish; whereas those that ignore cybercrime and the "dark side" of the Internet are likely to get badly burnt.This important new book highlights the key issues in online risk management, taking the premise that information security is no longer an issue confined to the IT department but is critical to all operational functions: finance, HR, marketing, production etc.Nor are its solutions purely technical. With two thirds of security breaches said to be caused by human error, management controls and processes are equally important. Published in association with the Institute of Directors in England, "The Secure Online Business" draws on the experience of leading firms and their advisers and uses up-to-date case studies to illustrate "best practice" in online risk management.
The Web is an exciting but unstable place to do business. The potential rewards are high but so are the risks and the effective management of these risks "online" is likely to be the greatest business enabler/destroyer of the early 21st century. Risk to the integrity, availability and confidentiality of e-business activities comes in many forms - fraud, espionage, viruses, spamming, denial of service - and the potential for damage or irretrievable loss is very real. Information security is no longer an issue confined to the IT department but is critical to all operational functions and departments within an organisation. Nor are the solutions purely technical - with two thirds of security breaches caused by human error, management controls and processes are equally important. This book is designed as a practical guide for managers in developing and implementing appropriate strategies for online risk management. Published in association with the Institute of Directors, the contributions draw on a wide range of expertise and know-how, both in IT and in other disciplines such as the law, insurance, accounting and consulting. Security should not be an afterthought in developing a strategy. It is an integral part of setting up sustainable new channels of communication and business.