5.2.5 Security goals and services

The implementation of a security solution obviously serves some goals. The main goal of a security solution is to protect information assets stored on and transmitted between computer systems. These information assets may be attacked by internal or external hackers, or even employees, intentionally or unintentionally. Security is built on some typical security services, which we will explain in the following text.

Throughout this section you should remember the following three important facts:

1. The implementation of a security solution is always a trade-off between security and ease of use. Ease of use usually means less or even no security. Good security usually means no ease of use. It s a big challenge for every security architect to find the right balance between the two.
2. Security is everybody s responsibility. The creation of a secure IT environment is not just the responsibility of your organization s IT staff. Everyone in the organization has a responsibility to respect and implement the corporate security policies.
3. Different levels of security needs may coexist in a single organization. Your CIO and the executive staff will obviously have higher security needs then the office maintenance personnel.